21141 matches found
CVE-2026-105405
Removed by vendor...
CVE-2026-105405
A flaw exists in ImageMagick before versions 6.9.13-56 and 7.x before 7.1.2-31 . A remote attacker can exploit an invalid memory free vulnerability in the MVG decoder by supplying a specially crafted Magick Vector Graphics (MVG) image for processing. This triggered condition crashes the applicati...
CVE-2026-105405 ImageMagick before 7.1.2-31 Invalid Memory Free in MVG Decoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
EUVD-2026-95009
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: WebAssembly component...
RLSA-2026:77576 Important: perl-DBI security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...
CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-RE57031 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
CVE-2026-42504 affects multiple packages. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...
CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-106433: Access of Resource Using Incompatible Type
Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...
EUVD-2026-95139
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95210
The gnutls cryptographic library (specifically version v3.8.13 ) contains a vulnerability in the check_for_unknown_exts() function due to errors in the certificate validation process. This flaw allows the application to accept certificates containing invalid extensions , which could enable a mali...
CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95210: Improper Certificate Validation
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...