AlmaLinux 9.2 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752246531)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752246531 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affecte...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1788346723)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1788346723 advisory. - Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31,...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_0161)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220161 advisory. OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 OpenJDK: Incorrect reading of TIFF files in...

CentOS Linux 7 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-debug / java-11-openjdk-demo / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786706544)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786706544 advisory. - Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31,...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785152373)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785152373 advisory. - Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1785152037)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1785152037 advisory. - Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

CentOS Linux 6 [TuxCare] Security Update: java-1.7.0-openjdk / java-1.7.0-openjdk-demo / etc (CENTOS6:CLSA-2026:1790152236)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1790152236 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO...

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Glass Cage：针对 iOS 18.2.1 的零点击 PNG 利用链 CVE-2025-43300： ImageIO 中的越界写入 CVE-2025-24201： WebKit 远程代码执行 CVE-2025-24085： Core Media 权限提升 已修复： 2025 年 1 月至 3 月 测试设备： iPhone 14 Pro Max iOS 18.2.1 VirusTotal 分析（已验证哈希） 摘要 Glass Cage 是一个关键的、零点击的 PNG 利用链，在野外 被发现，目标为 iOS...

exr-imageio-poc

exr-imageio-poc 针对 ImageIO 中整数溢出漏洞的 PoC，该漏洞已在 iOS/macOS 26.5 中修复 CVE-2026-28990 漏洞发现者：Jiri Ha 和 Arni Hardarson 漏洞详情 在 iOS/macOS 26.5 之前，函数 EXRReadPlugin::decodeBlockAppleEXR 在计算缓冲区大小时存在整数溢出漏洞。 通过使提供的图像的 width 和 height 值相乘后环绕到 0，然后以非常小的尺寸调用 malloctypemalloc，可能导致内存破坏。 提供包含多余像素数据的图像文件会导致堆溢出和崩溃： thre...

zero-click-exploit-analysis

零点击，老把戏 2025年 WhatsApp/ImageIO 零点击漏洞利用链剖析 （CVE-2025-55177 + CVE-2025-43300）。研究论文及 交互式网站伴侣，包含 CVE 讲解、补丁对比、 以及实操堆/栈实验室。 在线站点：https://mcs.danielwagner.ro 论文（PDF）：write-primitive-exploits-ios-to-linux-root.pdf 演讲幻灯片：https://mcs.danielwagner.ro/slides（Manim Community 套件，16 个场景，源码位于 manim/ 下） 团队...

CVE-2022-26711

CVE-2022-26711: Apple ImageIO WebP 整数溢出漏洞 Apple ImageIO 框架在解析 WebP 图像时存在一个整数溢出漏洞，导致越界内存访问。 完整漏洞分析 - 包含反汇编的详细根本原因分析。 概述 在处理畸形 WebP 图像时，行字节计算期间发生整数溢出。溢出导致分配了过小的缓冲区，随后在图像解码期间被覆盖。 处理恶意构造的 WebP 图像可能导致在任意使用 ImageIO 的应用程序（Safari、预览、邮件、信息、快速查看等）中执行任意代码。 | 受影响| 已修复 ---|---|--- macOS| Monterey 12.4| 12.4...

CVE-2026-28956-jxl-messages-surface

JPEG XL 在 iOS 信息预览路径中自动解码 针对 CVE-2026-28956（AppleJPEGXL）的投递面发现，以及补丁差异归因和对公开 PoC 可靠性的现实核查。 TL;DR — 传统认知（以及我们此前用 EXR 进行的测量）认为 iOS 信息会将非 JPEG/PNG/HEIC 附件渲染为通用文件块而不进行解码。JPEG XL 打破了这一假设：.jxl 附件在信息预览路径中确实会被交给解码器处理 。我们观察到 MobileSMS 中的 ImageIO 在收到内容时即尝试解码 JXL 数据，全程无需用户交互。这使得 AppleJPEGXL 成为活跃的零点击攻击面，而 EXR...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: ImageIO. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerabili...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: ImageIO. The supported versions affected include Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerability allows an...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. The supported versions affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. This easily exploitable vulnerability allows an unauthenticat...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: ImageIO. The supported versions affected include Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerability allows an...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: ImageIO. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerabili...

Exploit for Out-of-bounds Read in Apple Ipados

JPEG XL auto-decodes in the iOS Messages preview path A deliv...

USN-8695-1: CRaC JDK 25 vulnerabilities

It was discovered that the JSSE component of CRaC JDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 25 did not correctly authorize users. A remote...

USN-8694-1: CRaC JDK 21 vulnerabilities

It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 21 did not correctly authorize users. A remote...