Linux Distros Unpatched Vulnerability : CVE-2026-80598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3...

PT-2026-82972

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfs check restart area validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 ra ofs, ra len, ca ofs; ... ra l...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: umoci (UTSA-2026-031608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031608 advisory. Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when umoci unpack o...

CVE-2026-80598: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read...

PT-2026-82875

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-81285: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-65979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.1...

PT-2026-83161

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-pvr plugin where the VQ compressed decoder fails to properly perform memory bounds checking when processing specially crafted PVR image files. This missing validation...

PT-2026-89230

GHSA-7fj9-65v4-rp7h: Arbitrary file write on host via image-planted symlinks and oci.dns. newline injection...

PT-2026-83083

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload image. Performing a manipulation of the argument image path results in path traversal. The attack can be initiated remotely. The...

PT-2026-82956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized value bug exists in the hfsplus module during the file system mounting process. When loading the catalog from a corrupted HFS+ image, a corrupted node size value of 1 ca...

CVE-2026-38349: Integer Overflow or Wraparound

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

PT-2026-82898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the decompress lznt function. The issue occurs because the function fails to validate array index bounds before accessing the decompression table. A...

Linux Distros Unpatched Vulnerability : CVE-2026-59186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0...

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created image file...

The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, is related to integer overflow. This allows attackers to cause system failures.

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-77365: Improper Neutralization of Input During Web Page Generation

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' abovefoldimages parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...

CVE-2026-81493

GHSA-p2v3-6wvc-cv3p: Arbitrary file write on host via image fingerprint path traversal...

Exploit for Out-of-bounds Write in Adobe Dng_Software_Development_Kit

Out-of-bounds write in dngrendertask::ProcessArea Adobe D...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...