CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-81285: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

PT-2026-82972

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfs check restart area validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 ra ofs, ra len, ca ofs; ... ra l...

PT-2026-83146

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

CVE-2026-80598: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read...

CVE-2026-38349: Integer Overflow or Wraparound

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

PT-2026-83083

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload image. Performing a manipulation of the argument image path results in path traversal. The attack can be initiated remotely. The...

PT-2026-83161

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-pvr plugin where the VQ compressed decoder fails to properly perform memory bounds checking when processing specially crafted PVR image files. This missing validation...

CVE-2026-38348: Integer Overflow or Wraparound

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

PT-2026-82898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the decompress lznt function. The issue occurs because the function fails to validate array index bounds before accessing the decompression table. A...

PT-2026-89230

GHSA-7fj9-65v4-rp7h: Arbitrary file write on host via image-planted symlinks and oci.dns. newline injection...

CVE-2026-77365: Improper Neutralization of Input During Web Page Generation

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' abovefoldimages parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...

PT-2026-82875

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

PT-2026-82944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the OCFS2 file system where a corrupted journal dinode in a fuzzed OCFS2 image can cause a kernel crash during the mount process. The issue occurs because the function...

PT-2026-82956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized value bug exists in the hfsplus module during the file system mounting process. When loading the catalog from a corrupted HFS+ image, a corrupted node size value of 1 ca...

CVE-2026-19084: External Control of File Name or Path

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created image file...

OpenEXR Integer Overflow DoS

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-65979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.1...

Linux Distros Unpatched Vulnerability : CVE-2026-59186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0...