217 matches found
CVE-2026-24856
CVE-2026-24856 affects iccDEV up to version 2.3.1.2. The issue is an undefined behavior when converting floating-point NaN values to unsigned short integers during ICC profile XML parsing, which can corrupt memory structures and enable arbitrary code execution. The fix is in version 2.3.1.2. IBM/...
PT-2026-5226
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A flaw exists in versions prior to 2.3.1.2 where undefined behavior occurs during the conversion of...
Azure Linux 3.0 Security Update: jq (CVE-2024-53427)
The version of jq installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53427 advisory. - decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric,...
Oracle Linux 9 : transfig (ELSA-2026-0700)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-0700 advisory. 1:3.2.7b-11 - Detect nan in spline control values - CVE-2025-46397 Tenable has extracted the preceding description block directly from the Oracle Linux security...
CVE-2022-33253
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames...
CVE-2026-21681 iccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Undefined Behavior runtime error. This vulnerability affects users of the iccDEV library who...
TencentOS Server 4: jq (TSSA-2025:0286)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0286 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2025-134922
Malicious code in abyil-nan-lasik npm...
EUVD-2025-134925
Malicious code in abyil-nan-lasaihmuk npm...
EUVD-2025-134926
Malicious code in abyil-nan-lasaihmuk npm...
EUVD-2025-134924
Malicious code in abyil-nan-lasihuk npm...
EUVD-2025-134923
Malicious code in abyil-nan-lasihuk npm...
EUVD-2025-134920
Malicious code in abyil-nan-lasiuk npm...
EUVD-2025-134921
Malicious code in abyil-nan-lasik npm...
Malicious code in abyil-nan-lasaihmuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a97b8bddd4ccea2bc5003617ad2cff47caaae86a33958639d201a3f27728278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134919
Malicious code in abyil-nan-lasiuk npm...
SUSE-SU-2025:03490-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2019-6461: Avoid assert when drawing arcs with NaN angles bsc1122338...
Security update for cairo
This update for cairo fixes the following issues: CVE-2019-6461: Avoid assert when drawing arcs with NaN angles bsc1122338 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...