CVE-2026-52834

jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::withalloctracker and related grid and subgrid arithmetic. A 65536 x 65536 frame can pass the frame-area lim...

CVE-2026-75148

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

DEBIAN-CVE-2026-65610

nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...

MINI-FHPW-PM3P-PV4G

Bulletin has no description...

MINI-2R8R-F5GJ-W6XR

Bulletin has no description...

MINI-XJGW-87PF-5G27

Bulletin has no description...

MINI-CPF9-WVHM-FFQR

Bulletin has no description...

MINI-P9XR-49HQ-8MP6

Bulletin has no description...

MINI-QP68-JF5X-MG43

Bulletin has no description...

MINI-4GG9-P8JQ-XQPP

Bulletin has no description...

MINI-M4X8-VMWX-F2XM

Bulletin has no description...

MINI-QFG2-R6Q3-R7CC

Bulletin has no description...

MINI-V8JF-H2H9-8V5M

Bulletin has no description...

MINI-MWXV-C6QF-7J62

Bulletin has no description...

MINI-R7FM-MPCX-46V6

Bulletin has no description...

MINI-3GX9-3686-632F

Bulletin has no description...

CVE-2026-75148

cgltf through 1.15 is affected by an integer overflow in the non-sparse accessor bounds check within cgltf_validate() . A crafted accessor count value in a malformed .gltf or .glb file overflows the unsigned integer multiplication of accessor stride and element count, causing the bounds check to ...

EUVD-2026-62431

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...