CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

nginx:1.26 security update

1.26.3-9.0.1.3 - Require oracle-indexhtml 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and...

CVE-2026-52489

gpac , a multimedia framework, is affected by a buffer overflow in the svgNameToImplementationName() function (commit 31becc9e08b88e525a4a62013a4000de1c0f8fd9), allowing an attacker to execute arbitrary code . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low pr...

CVE-2026-52489

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName function...

PT-2026-81522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the WebRTC component, which can be triggered by a remote attacker using a specially crafted HTML page. This flaw allows for the execution of arbitrary code...

PT-2026-81378

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2026 Q3 Description An integer overflow leads to an out-of-bounds write, which occurs when a program writes data past the end of a pre-allocated memory buffer. This issue can result in information disclosure or...

PT-2026-81495

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description The PyOpenEXR Python bindings contain a heap out-of-bounds write that occurs when reading a specially crafted deep scanline EXR file. The issue arises when...

PT-2026-81791

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the Media component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing a user to visit a specially crafted HTML pag...

PT-2026-81846

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow in Chromecast allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML pag...

PT-2026-81399

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.11 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description A heap out-of-bounds write occurs on 32-bit/ILP32 builds when processing a crafted tiled EXR file via the TiledRgbaInputFi...

PT-2026-81710

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox by using a crafted HTML page. ANGLE Almost Native Graphics Layer Engine is a...

CVE-2026-55373

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

Vulnerability of functions udma_check_tx_completion(), udma_ring_irq_handler(), udma_udma_irq_handler(), and udma_tx_status() in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine. This vulnerability allows an attacker to cause a service failure.

The vulnerabilities of the functions udmachecktxcompletion, udmaringirqhandler, udmaudmairqhandler, and udmatxstatus in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine are related to integer overflows. Exploitation of these vulnerabilities could allow an attacker to cause a...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the sev_pin_memory() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the sevpinmemory function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `range_is_hole_in_parent()` function in the `fs/btrfs/send.c` module of the btrfs file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rangeisholeinparent function in the fs/btrfs/send.c module of the btrfs file system in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the jumbo_frm() function in the drivers/net/ethernet/stmicro/stmmac/chain_mode.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the __blk_addTrace() function in the kernel/trace/blktrace.c module, which supports kernel tracing in Linux operating systems, allows a malicious actor to cause a service failure.

The vulnerability of the blkaddTrace function in the kernel/trace/blktrace.c module, which supports kernel tracing in Linux operating systems, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to trigger a...

The vulnerability of the ncm_unwrap_ntb() function in the driver/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...