391969 matches found
CVE-2026-73433 Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
EUVD-2026-57444
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
CVE-2026-73434
Summary: CVE-2026-73434 affects the GStreamer gst-plugins-good package (avidemux). The flaw occurs in gst_avi_demux_riff_parse_vprp(): it computes the number of available gst_riff_vprp_video_field_desc entries by dividing the remaining buffer size by the attacker-controlled vprp->fields, inste...
CVE-2026-73433
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
Pillow: Pillow: Native heap out-of-bounds write
A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation, and ImagingExpand computes output...
libgcrypt security update
An update is available for libgcrypt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libgcrypt library provides general-purpose implementations of various...
nanoid: nanoid: Predictable ID generation due to integer overflow
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
K000162891: Jettison vulnerability CVE-2022-45693
Security Advisory Description Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string. CVE-2022-45693 Impact There is no impact; F5 products are not affected by this...
JLSEC-2026-1265 GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by...
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...
CVE-2026-68433
A flaw was found in the libceph component of the Linux kernel. This vulnerability occurs because the system incorrectly processes replies, using an allocated buffer size rather than the actual received data length. A specially crafted, truncated reply can lead to the system reading uninitialized...
K000162889: Linux kernel vulnerability CVE-2026-63796
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2validategdparent only bounds bgbits against the parent allocator's chain geometry. A malicious descriptor can still claim a bgsize/bgbits pair th...
CVE-2026-43629
A flaw was found in llama.cpp. An attacker with local write access to specific directories can exploit a heap buffer overflow vulnerability. By crafting malicious data files, the attacker can cause the system to write beyond intended memory boundaries. This could lead to data corruption or, in...
CVE-2026-29035
A flaw was found in CivetWeb. An unauthenticated remote attacker could exploit a heap and stack buffer overflow vulnerability by sending specially crafted compressed WebSocket frames. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution. The...
CVE-2026-73086
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
CVE-2026-68440
A flaw was found in the Linux kernel's txgbe network driver. When reading module EEPROM Electrically Erasable Programmable Read-Only Memory, the txgbereadeepromhostif function can attempt to copy more data than the allocated buffer size if the data length is not a multiple of four. This...
kernel: accel/ivpu: Fix signed integer truncation in IPC receive
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied datasize is cast to signed int before being used in mint. Large unsigned values = 0x80000000 become negative, causing...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
