61604 matches found
PT-2026-87799
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
ROS-20260908-73-0030
The vulnerability in golang-x-image is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2026-87382
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
PT-2026-95729
A vulnerability in libheif, used by the default Sharp image service in Astro, can lead to remote code execution when a malicious AVIF image is optimized. Projects are affected when an attacker can cause Astro to process an untrusted AVIF image. The fix was released in Astro 7.2.8, which requires...
CVE-2026-78741: Improper Neutralization of Input During Web Page Generation
Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...
PT-2026-87153
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description Insufficient validation of shard key values during document insertion allows authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in...
ROS-20260908-73-0089
The vulnerability in golang-x-image is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-69649: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
EulerOS 2.0 SP12 : docker-runc (EulerOS-SA-2026-3256)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...
EulerOS 2.0 SP12 : libXpm (EulerOS-SA-2026-3273)
According to the versions of the libXpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by...
EulerOS 2.0 SP12 : docker-runc (EulerOS-SA-2026-3331)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...
RHEL 10 : image-builder (RHSA-2026:65534)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65534 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes:...
PT-2026-89116
Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description Crafted grid, iovl, and iden reference graphs can cause the same base image to be decoded repeatedly. This occurs because processed ids is copied per branch and the decode image function in ImageIte...
CVE-2026-70351: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-69341: Use After Free
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
EulerOS 2.0 SP12 : libXpm (EulerOS-SA-2026-3348)
According to the versions of the libXpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by...
ROS-20260908-73-0031
The vulnerability in golang-x-image is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
OPENSUSE-SU-2026:11719-1 gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...