CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106239

An integer overflow flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/546630009...

CLSA-2026-1791184271 freerdp: Fix of 3 CVEs

CVE-2026-55564: fix out-of-bounds read in glyphcacheget; reject an index equal to the cache size - CVE-2026-55191: fix 32-bit integer overflow in the avc444ensurebuffer YUV444 buffer size calculation - CVE-2026-55192: reject H.264 frames decoded by openh264 that are smaller than the context...

SUSE CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-106062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's DirectDraw Surface DDS loader. When loading a crafted DDS image, buffer sizes derived from width, height, and...

Linux Distros Unpatched Vulnerability : CVE-2026-105837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted tra...

Linux Distros Unpatched Vulnerability : CVE-2026-106332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

PT-2026-107623

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation...

Linux Distros Unpatched Vulnerability : CVE-2026-106063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates ...

SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4531-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4531-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...

ROS-20261007-73-0376

The vulnerability of the tipcgroupprotorcv function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261007-73-0179

The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-107224: Integer Overflow or Wraparound

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and allocation. ReadZipReader obtains UncompressedSize64 throu...

CVE-2026-106067: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width height and related arithmetic while the filter’s pixel access path uses the true image size, after integer overflow in the allocation size...

CVE-2026-106066: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-106065: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation...

ROS-20261007-73-0079

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2026-107384

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the X cursor XMC thumbnail loader. When generating a thumbnail for a specially crafted XMC file, the software calculates the pixel buffer size using 32-bit signed arithmetic for...