Apache bRPC buffer error vulnerability

Versions 1.11.0 through 1.17.0 of Apache bRPC contain a buffer error vulnerability. This vulnerability arises because the streaming RPC client fails to validate the size of the returned list of extrastreamids prior to processing StreamSettings responses. It then returns identifiers by using a loc...

PT-2026-120539

Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC version 1.18.0 on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser trusts t...

PT-2026-129109

Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek and DcxImageFile.seek reparse later MPO or DCX frames and replace self. size without rerunning Image. decompression bomb check. A crafted multi-frame image can use a tiny first frame to pass Image.open and then declare an...

Linux Distros Unpatched Vulnerability : CVE-2026-113225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Vyper buffer error vulnerability

In version 0.1.0b4 of Vyper prior to 0.3.0, there is a buffer error vulnerability. This vulnerability arises when internal function calls occur within tuples or nested calls, causing an incorrect stack top pointer. It may lead to memory corruption, resulting in contracts returning corrupted value...

Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation

Apache NiFi MiNiFi C++ versions 1.0.0 and 0.99.2 contain an uncontrolled memory allocation issue in the InputStream reader. A length field from a site-to-site or C2 stream can cause an oversized allocation and crash the agent. // // // Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation /...

Linux Distros Unpatched Vulnerability : CVE-2026-113093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v...

Linux Distros Unpatched Vulnerability : CVE-2026-113212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. Chromium security severity:...

Linux Distros Unpatched Vulnerability : CVE-2026-113284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-113192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

PT-2026-120703

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An issue involving out-of-bounds writes was identified during an internal security review. Out-of-bounds writes occur when a program writes data past the end of the intended...

Cisco FTD: CVE-2026-76489: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to...

PT-2026-120666

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.20.0 Description Accessing a crafted PDF stream containing a large number of filters or multiple filters that process large amounts of data can lead to excessive memory consumption. Recommendations Update to version...

PT-2026-120802

Name of the Vulnerable Software and Affected Versions Django REST framework versions 3.6.4 through 3.18.1 Description The JSONParser.parse function in rest framework/parsers.py uses the client-supplied Content-Type charset value with codecs.getreader. This allows the use of byte-transform codecs,...

Red Hat: CVE-2026-96644: pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using...

PT-2026-120822

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description On Windows, the src/PIL/WmfImagePlugin.py component passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler determines the size of a Device Independe...

PT-2026-120818

Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description The BmpRleDecoder.decode function in src/PIL/BmpImagePlugin.py allows crafted RLE BMP delta escapes and absolute-mode runs to append data beyond the remaining dest length because it lacks a...

Red Hat: CVE-2026-96638: pillow: pillow: Denial of Service via crafted RLE BMP image

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining destlength without a per-branch cap. A delta can add roughly 255 image rows in one iteration, ...

PT-2026-120169

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF DIB synthesis because winpr read png from buffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr bitmap write buffer copies rows assuming one byte per pixel. A malicious RDP...

Linux Distros Unpatched Vulnerability : CVE-2026-113131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...