CVE-2026-80797

A flaw was found in the Near Field Communication NFC PN533 driver in the Linux kernel. When a PN533 device is removed while data fragments are still queued, the driver's cleanup process fails to properly release these fragments, resulting in a memory leak. This can lead to system instability or...

Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...

EUVD-2026-93560

ImageSharp: CCITT fax decompression T4/Modified Huffman: unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp...

EUVD-2026-93871

yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header...

DEBIAN-CVE-2026-106578

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106578

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC A powershell poc to load and automatically run Certify and Rubeus from memory. How it works? 1. Loads Certify.exe and Rubeus.exe in memory. 2. Scans the target machine for misconfigured certificate templates. more on https://www.youtube.com/watch?v=HBRCI5O35R8 3...

CVE-2026-106578 ImageMagick: Invalid Memory Free in MVG decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106578

The ImageMagick image manipulation software is vulnerable to an invalid memory free in the MVG decoder when processing a crafted image. This flaw can result in a process crash . The vulnerability affects versions prior to 7.1.2-31 and 6.9.13-56 . Remediation is available in versions 7.1.2-31 and ...

EUVD-2026-94399

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106578 ImageMagick: Invalid Memory Free in MVG decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

Security update for rpcbind

This update for rpcbind fixes the following issues: CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340. CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326. Patch...

CVE-2026-80902

A flaw was found in the Linux kernel's sun6i-dma component. When Direct Memory Access DMA transfers are terminated, active descriptors are not correctly reclaimed. This issue leads to a permanent memory leak and can also cause corruption of internal data structures within the kernel...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

vulnerabilities in Google Android

Google has identified vulnerabilities in Android. Samsung has addressed the vulnerabilities relevant to Samsung Mobile devices in their products. These vulnerabilities include incorrect bounds checking, missing permission checks, integer overflows, improperly initialized pointers, type confusion,...

AZL-106728 CVE-2026-77214 affecting package expat 2.8.3-2

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

DEBIAN-CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-46570

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-77214

The libexpat library (versions prior to commit 13c5f63 ) contains a heap buffer over-read vulnerability in xmlparse.c. The XML_ParseBuffer function fails to validate the caller-supplied len against the allocated buffer size when updating parser->m_bufferEnd. Consecutive calls to XML_ParseBuffe...