55740 matches found
CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...
CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...
CVE-2026-63878
A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker can exploit an integer overflow vulnerability by providing an excessively large value for the numentries parameter in the GEMOP GETMAPPINGINFO ioctl. This can lead to an attempt to allocate an extremely large amoun...
SUSE-SU-2026:3169-1 Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703. - CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a he...
SUSE-SU-2026:3168-1 Security update for openexr
This update for openexr fixes the following issue - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703...
USN-8582-1: jbig2dec vulnerabilities
Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an out-of-bounds read vulnerability in its command-line tool. An attacker could possibly use this issue to cause jbig2dec to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-46361 It was...
USN-8582-1 jbig2dec vulnerabilities
Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an out-of-bounds read vulnerability in its command-line tool. An attacker could possibly use this issue to cause jbig2dec to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-46361 It was...
CVE-2026-63881
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver debugger component. The getqueueids function, responsible for handling queue identifiers, contains an integer overflow vulnerability. This occurs when calculating the size of an array, where a malicious local user could provide a...
CVE-2026-16408
Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16402
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16395
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16389
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16369
Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
UBUNTU-CVE-2026-16408
Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16395
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16369
Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
UBUNTU-CVE-2026-16389
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16402
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-63881
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger getqueueids computes arraysize = numqueues sizeofuint32t, which could overflow on 32-bit sizet build. using arraysize instead, it saturates to SIZEMAX on overflo...
