61312 matches found
CVE-2026-64714
A memory corruption issue exists in Apple products due to insufficient bounds checking. Processing a maliciously crafted image can result in a denial-of-service (DoS). The vulnerability affects iOS 18.7.10 , iPadOS 18.7.10 , macOS Golden Gate 27 , macOS Sequoia 15.7.8 , and macOS Sonoma 14.8.8 . ...
EUVD-2026-77969
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service...
CVE-2026-64714
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service...
CVE-2026-28934
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...
EUVD-2026-78096
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...
CVE-2026-28934
A buffer overflow vulnerability exists in macOS because of insufficient bounds checking. An attacker could exploit this by tricking a user into mounting a malicious disk image , which may result in unexpected system termination . This issue has been addressed in macOS Golden Gate 27 , macOS Sequo...
CVE-2026-28934
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...
CVE-2026-53717
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...
USN-8739-2: ImageMagick vulnerabilities
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...
CVE-2026-89021 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction
MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...
CVE-2026-89021 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction
MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...
CVE-2026-89021
MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package's OCI/tar image extraction . The root cause is unsanitized tar member path extraction during container import via /container/add, allowing an attacker to supply a crafted image with symlinks pointing ...
EUVD-2026-77716
Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID. Attackers can exploit DNS time-of-check-time-of-use race conditions and shared address space bypasses t...
GHSA-2XMM-M4WV-3FJH October CMS: Incomplete Scheme Validation in Image Resizer
The image resizer classified external sources by testing whether the source string began with the substring http, and the string-source branch in ResizeImageItem::fromObject accepted any value containing :// as a URL. As a result, non-https PHP stream wrappers such as phar://, file:// and ftp://...
October CMS: Incomplete Scheme Validation in Image Resizer
The image resizer classified external sources by testing whether the source string began with the substring http, and the string-source branch in ResizeImageItem::fromObject accepted any value containing :// as a URL. As a result, non-https PHP stream wrappers such as phar://, file:// and ftp://...
Updated libcupsfilters & cups-filters packages fix security vulnerabilities
cpu exhaustion via infinite loop in cfieee1284normalizemakemodel. CVE-2026-64611 cups image filter process abort via malformed png. CVE-2026-64612...
MGASA-2026-0407 Updated libcupsfilters & cups-filters packages fix security vulnerabilities
cpu exhaustion via infinite loop in cfieee1284normalizemakemodel. CVE-2026-64611 cups image filter process abort via malformed png. CVE-2026-64612...
USN-8755-1: libvips vulnerability
It was discovered that libvips incorrectly handled specially crafted TIFF images when saving them as HEIF images. An attacker could possibly use this issue to cause libvips to crash, resulting in a denial of service...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image with an unallocated bitmap can lead to an endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...