57454 matches found
CVE-2026-52834 jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms
jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::withalloctracker and related grid and subgrid arithmetic. A 65536 x 65536 frame can pass the frame-area lim...
CVE-2026-52834 jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms
jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::withalloctracker and related grid and subgrid arithmetic. A 65536 x 65536 frame can pass the frame-area lim...
EUVD-2026-62513
jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::withalloctracker and related grid and subgrid arithmetic. A 65536 x 65536 frame can pass the frame-area lim...
CVE-2026-52834
The Rust crate jxl-grid (versions 0.1.1–0.5.3) computes width * height unchecked in AlignedGrid::with_alloc_tracker, which overflows usize on 32-bit targets, allocating undersized backing buffers. A crafted JPEG XL image decoded via render_frame() triggers out-of-bounds writes through mutable sub...
CVE-2026-75148
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...
DEBIAN-CVE-2026-65610
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
MINI-FHPW-PM3P-PV4G
Bulletin has no description...
MINI-2R8R-F5GJ-W6XR
Bulletin has no description...
MINI-XJGW-87PF-5G27
Bulletin has no description...
MINI-CPF9-WVHM-FFQR
Bulletin has no description...
MINI-P9XR-49HQ-8MP6
Bulletin has no description...
MINI-QP68-JF5X-MG43
Bulletin has no description...
MINI-4GG9-P8JQ-XQPP
Bulletin has no description...
MINI-M4X8-VMWX-F2XM
Bulletin has no description...
MINI-QFG2-R6Q3-R7CC
Bulletin has no description...
MINI-MWXV-C6QF-7J62
Bulletin has no description...
MINI-R7FM-MPCX-46V6
Bulletin has no description...
MINI-3GX9-3686-632F
Bulletin has no description...
EUVD-2026-62431
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...
CVE-2026-75148
cgltf through 1.15 is affected by an integer overflow in the non-sparse accessor bounds check within cgltf_validate() . A crafted accessor count value in a malformed .gltf or .glb file overflows the unsigned integer multiplication of accessor stride and element count, causing the bounds check to ...