CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

nginx:1.26 security update

1.26.3-9.0.1.3 - Require oracle-indexhtml 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

Vulnerability of functions udma_check_tx_completion(), udma_ring_irq_handler(), udma_udma_irq_handler(), and udma_tx_status() in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine. This vulnerability allows an attacker to cause a service failure.

The vulnerabilities of the functions udmachecktxcompletion, udmaringirqhandler, udmaudmairqhandler, and udmatxstatus in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine are related to integer overflows. Exploitation of these vulnerabilities could allow an attacker to cause a...

The vulnerability of the ncm_unwrap_ntb() function in the driver/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `range_is_hole_in_parent()` function in the `fs/btrfs/send.c` module of the btrfs file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rangeisholeinparent function in the fs/btrfs/send.c module of the btrfs file system in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.

The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

The vulnerability of the jumbo_frm() function in the drivers/net/ethernet/stmicro/stmmac/chain_mode.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:59152)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59152 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RockyLinux 8 : gstreamer1-plugins-good (RLSA-2026:59179)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:59179)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59179 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

PT-2026-81495

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description The PyOpenEXR Python bindings contain a heap out-of-bounds write that occurs when reading a specially crafted deep scanline EXR file. The issue arises when...

FreeBSD -- Multiple vulnerabilities in ppp(8)

Problem Description: ppp8 contained three memory safety errors in its handling of multilink endpoint discriminator options. mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result...

RHEL 8 : gstreamer1-plugins-base (RHSA-2026:59487)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59487 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

FreeBSD-SA-26:61.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:61.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2026-08-25 Credits:...

UBUNTU-CVE-2026-59183

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...

The vulnerability of the filemap_map_pages() function in the mm/filemap.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filemapmappages function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-52489

A Buffer Overflow vulnerability exists in gpac (commit 31becc9e08b88e525a4a62013a4000de1c0f8fd9) in the svgNameToImplementationName() function, allowing an attacker to execute arbitrary code . No fixed version or confirmed exploitation is provided in the documents. A related report is tracked at ...

RockyLinux 9 : sqlite (RLSA-2026:58936)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58936 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...