The vulnerabilities of the functions drm_sched_entity_kill_jobs_cb() and drm_sched_entity_kill_jobs() in the drivers/gpu/drm/scheduler/sched_entity.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allow a malicious actor to cause a service failure.

The vulnerabilities of the functions drmschedentitykilljobscb and drmschedentitykilljobs in the drivers/gpu/drm/scheduler/schedentity.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel are related to improper memory release mechanisms memory leaks. Exploiting these...

ffmpeg 安全漏洞

FFmpeg is a Rust library developed by a single developer. Versions 8.0 and 8.0.1 of FFMPEG contain security vulnerabilities, which stem from an oversight in the validation of quantization parameters. These vulnerabilities may lead to out-of-bounds reads, memory leaks, or system crashes...

iccDEV Buffer Overflow Vulnerability

iccDEV is a color configuration code base. A buffer overflow vulnerability exists in iccDEV that can be exploited by an attacker to cause a memory leak or crash...

The vulnerability of the smu_v13_0_4_fini_smc_tables() function in the drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_4_ppt.c driver of the Direct Rendering Infrastructure (DRI) graphics card for AMD-based Linux operating systems allows a attacker to cause a system failure.

The vulnerability of the smuv1304finismctables function in the driver/gpu/drm/amd/pm/swsmu/smu13/smuv1304ppt.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper memory release mechanisms memory leaks. Exploiting this...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression bsc1258743. CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. CVE-2026-24485: denial of service via malforme...

NewStart CGSL MAIN 6.06 (SP) : pcp Multiple Vulnerabilities (NS-SA-2026-0015)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has pcp packages installed that are affected by multiple vulnerabilities: - Multiple memory leaks in Performance Co-Pilot PCP before 3.6.5 allow remote attackers to cause a denial of service memory consumption or daemon crash via a larg...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open-source Java-based web server and Java Servlet container developed by the Eclipse Foundation. Versions 12.0.0 to 12.0.31, as well as 12.1.0 to 12.1.5 of Eclipse Jetty, have security vulnerabilities. These vulnerabilities stem from the fact that the GzipHandler does not...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005728 advisory. In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite function Common realloc mistake: 'fileappend' nulled...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005423 advisory. In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite function Common realloc mistake: 'fileappend' nulled...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005627 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported 0 memory leak...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005604 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a...

SUSE-SU-2026:20530-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2026-25646: Fixed a heap buffer overflow vulnerability in pngsetdither/pngsetquantize bsc1258020. - CVE-2025-28162: memory leaks when running pngimage bsc1257364. - CVE-2025-28164: memory leaks when running pngimage bsc1257365. -...

SUSE-SU-2026:20523-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running pngimage bsc1257364. - CVE-2025-28164: memory leaks when running pngimage bsc1257365. - CVE-2026-22695: heap buffer over-read in pngimagefinishread bsc1256525. - CVE-2026-22801: integer truncation...

CVE-2026-27887 Spin has memory leaks in various WIT interfaces

Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...

CVE-2026-27887

CVE-2026-27887 affects Spin and related components where buffering an entire response from a database or HTTP server can exhaust host memory, causing panics/crashes. The issue arises when a guest app inserts large numbers of rows or large content bodies and Spin buffers the full response before d...

CVE-2026-27887 Spin has memory leaks in various WIT interfaces

Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...

NanaZip 安全漏洞

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1638.0, as well as versions before 6.5.1638.0, have security vulnerabilities. These vulnerabilities stem from the .NET Single File Application parser’s out-of-bounds read vulnerability during...

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities. These vulnerabilities stemmed from the msl.c...

Security update for libpng16

This update for libpng16 fixes the following issues: CVE-2025-28162: memory leaks when running pngimage bsc1257364. CVE-2025-28164: memory leaks when running pngimage bsc1257365. CVE-2026-22695: heap buffer over-read in pngimagefinishread bsc1256525. CVE-2026-22801: integer truncation causing hea...

SUSE-SU-2026:0596-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running pngimage bsc1257364. - CVE-2025-28164: memory leaks when running pngimage bsc1257365. - CVE-2026-22695: heap buffer over-read in pngimagefinishread bsc1256525. - CVE-2026-22801: integer truncation...