SUSE-SU-2026:22174-1 Security update for libjxl

This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks bsc1266460...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems...

Out-of-bounds Write

libzephyr.so is vulnerable to Out of Bounds Write. The vulnerability is due to insufficient bounds checks when filtering IDs in the canstm32removerxfilter, cannxps32removerxfilter, and mcp2515removerxfilter functions. This issue arises because these functions do not adequately verify that the...

PT-2023-23782 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description: The issue allows a remote attacker to potentially cause arbitrary code execution due to insufficient bounds checks. Recommendations: For iOS versions prior to 16.5, update ...

PT-2023-9535 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions 13.3 and earlier iOS versions 16.4 and earlier, 15.7.4 and earlier iPadOS versions 16.4 and earlier, 15.7.4 and earlier macOS Big Sur version 11.7.5 and earlier macOS Monterey version 12.6.4 and earlier tvOS version 16....

Debian: Security Advisory (DSA-2357-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200903-37 : Ghostscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-37 Ghostscript: User-assisted execution of arbitrary code Jan Lieskovsky from the Red Hat Security Response Team discovered the following vulnerabilities in Ghostscript's ICC Library: Multiple integer overflows CVE-2009-058...