Linux Distros Unpatched Vulnerability : CVE-2026-78465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes...

TencentOS Server 4: jq (TSSA-2026:0863)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0863 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-55373: Integer Overflow or Wraparound

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-79223: Integer Overflow or Wraparound

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-18445: Integer Overflow or Wraparound

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This...

CVE-2026-59183

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...

CVE-2026-79292: Integer Overflow or Wraparound

Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-81775

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow in WebGL allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. An integer overflow occurs when an arithmet...

TencentOS Server 4: pacemaker (TSSA-2026:0865)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0865 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the tipc_group_proto_rcv() function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the tipcgroupprotorcv function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

AZL-97923 CVE-2026-52492 affecting package libtiff 4.6.0-14

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

DEBIAN-CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

SUSE-SU-2026:23277-1 Security update for pcp

This update for pcp fixes the following issues: - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. - CVE-2026-16527: missing...

K000163067: Apache Thrift vulnerabilities CVE-2026-48586 and CVE-2026-55969

Security Advisory Description CVE-2026-48586 Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes th...

SUSE-SU-2026:23312-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images bsc1270004. - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363: heap buffer overwrite in fx...

OPENSUSE-SU-2026:21635-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images bsc1270004. - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363: heap buffer overwrite in fx...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...