CVE-2022-50999 Nokogiri before 1.13.5 Integer Overflow via libxml2

Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...

CVE-2022-50999

CVE-2022-50999 has been rejected as a duplicate of CVE-2022-29824 . The underlying flaw is an integer overflow in the buffer handling functions (xmlBuf* in buf.c, xmlBuffer* in tree.c) of the packaged libxml2 shipped with Nokogiri (Ruby gem) versions before 1.13.5 . By submitting a crafted multi-...

CVE-2022-50999

Removed by vendor...

CVE-2022-50998

...

CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2

Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...

EUVD-2022-56023

Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...

CVE-2022-50998

CVE-2022-50998 affects Nokogiri before version 1.13.9 (CRuby implementation using packaged libraries), which bundles libxml2 v2.9.14 . The bundled library is vulnerable to data corruption/double-free from an entity reference cycle (CVE-2022-40304) and integer overflows when parsing with XML_PARSE...

CVE-2022-50998

...

CVE-2022-50998

Removed by vendor...

CVE-2026-59183

A flaw was found in OpenEXR. An integer overflow vulnerability exists when decoding a specially crafted deep tiled EXR image file. This overflow can lead to an invalid memory pointer, causing applications that process these files to crash. This issue results in a denial of service. Mitigation...

CVE-2026-79902

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

USN-8675-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...

CVE-2026-52492

A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...

Security Bulletin: Security vulnerabilities may affect IBM Java shipped with TXSeries for Multiplatforms.

Summary Security vulnerabilities may affect IBM Java shipped with TXSeries for Multiplatforms CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-47059, CVE-2026-47010, CVE-2026-8400, CVE-2026-16439,...

Security Bulletin: Multiple security vulnerabilities may affect IBM Java that is shipped with IBM CICS TX Advanced.

Summary Multiple security vulnerabilities may affect IBM Java that is shipped with IBM CICS TX Advanced CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-47059, CVE-2026-47010, CVE-2026-8400, CVE-2026-16439,...

Security update for postgresql14

This update for postgresql14 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

SUSE-SU-2026:3793-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

CVE-2026-11824

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

OPENSUSE-SU-2026:21644-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...