Medium: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This...

Important: unbound

Issue Overview: In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor...

Important: flatpak

Issue Overview: In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g.,...

ROS-20260928-73-0107

The vulnerability of the kernel/futex component of the Linux operating system’s kernel is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

ROS-20260928-73-0080

The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ROS-20260928-73-0076

The vulnerability of the tcfifedump function in the net/sched/actife.c module of the net/sched/actife subsystem of the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0068

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: freerdp

Issue Overview: A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol...

Important: corosync

Issue Overview: A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send...

ROS-20260928-73-0061

The vulnerability of the mpcrcvdsweepreq function in the drivers/s390/net/ctcmmpc.c file of the S390 Linux operating system kernel driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0063

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260928-73-0064

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

ROS-20260928-73-0131

The vulnerability of the nftcthelperobjeval function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0113

The vulnerability of the fs/hfsplus component in Linux operating systems relates to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0112

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260928-73-0079

The vulnerability of the sctptransportupdaterto function in the net/sctp/transport.c module of the Linux operating system’s SCTP protocol implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260928-73-0018

The vulnerability of the isoconnfree function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0115

The vulnerability of the walkstackframe function in the arch/riscv/kernel/stacktrace.c file, a subsystem for module management on the RISCV architecture of the Linux operating system’s kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker,...