The vulnerabilities of the functions load_xwd_f2_d1_b1() and load_xwd_f1_d24_b1() in the Gimp image processing library allow a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the loadxwdf2d1b1 and loadxwdf1d24b1 functions in the Gimp image processing library is related to reading values outside of the permitted range in memory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service...

WS-2026-0058

crossplane-runtime's xpkg.CachedClient.Get resolved a package tag to a digest with fetcher.Head, had cosign verify that digest, and then re-fetched the image by the original tag - so the verified digest and the pulled bytes came from two independent registry requests. A registry serving different...

PT-2026-82762

Name of the Vulnerable Software and Affected Versions FFmpeg version N-122528-gdd2976b9e1 Description An integer overflow occurs in the libswscale/utils.c component. This issue allows attackers to trigger a Denial of Service DoS by providing a specially crafted image file. Recommendations At the...

PT-2026-82763

Name of the Vulnerable Software and Affected Versions FFmpeg version N-122528-gdd2976b9e1 Description An integer overflow occurs in the hScale16To19 c function within the libswscale/output.c component. This issue allows a remote attacker to trigger a Denial of Service DoS by providing a specially...

PT-2026-82683

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38348

FFmpeg contains an integer overflow vulnerability within the libswscale/utils.c component (specifically in version N-122528-gdd2976b9e1 ). A remote attacker can exploit this flaw by supplying a specially crafted image file to cause a Denial of Service (DoS) , potentially making the application un...

CVE-2026-38349

FFmpeg contains an integer overflow vulnerability in the hScale16To19_c() function located within libswscale/output.c. An attacker can exploit this by providing a specially crafted image file to trigger a Denial of Service (DoS) , which may cause the application to crash or become unresponsive, t...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

TencentOS Server 3: compat-libtiff3 (TSSA-2026:0895)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0895 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-ui-server-fips, kube-metrics-adapter, listmonk, temporal, temporal-fips, falcosidekick-ui-fips, kube-metrics-adapter-fips, falcosidekick-ui...

SUSE CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

USN-8683-1 libheif vulnerabilities

Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2026-62289 Ali Firas discovered that libheif...