Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561)

Summary Multiple vulnerabilities including path traversal and Denial of Service in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerabili...

CVE-2026-63449

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. The Session Initiation Protocol SIP parser incorrectly handles large SIP message bodies. When a SIP message body exceeds 65,536 bytes, the parser truncates its length, preventing the full...

CVE-2026-63450

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit a vulnerability in the FTP parser where sending a RETR or STOR command before PORT or PASV negotiation is incorrectly treated as a fatal error. This error...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

CVE-2026-57224

A flaw was found in Suricata. The DHCP and RDP parsers fail to record packet direction for stateless transactions. This allows a network sensor observing only one direction of traffic to accumulate an unbounded list of per-flow transactions. Consequently, this leads to increasing CPU and memory...

CVE-2026-57229

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. The SMTP Simple Mail Transfer Protocol MIME Multipurpose Internet Mail Extensions parser does not fully reset its state when processing encapsulated...

CVE-2026-63452

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit this vulnerability by sending repeated, small Brotli compressed responses to the HTTP/1 parser. This can cause the system to perform expensive decompression...

CVE-2026-57227

A flaw was found in Suricata. The MQTT parser in Suricata permits repeated PUBREC or PUBREL messages to be appended to a transaction without a limit. A remote attacker can send crafted MQTT traffic to grow the transaction state indefinitely, consuming excessive CPU and memory resources. This can...

CVE-2026-91811

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

Security update for gdb

This update for gdb fixes the following issue: CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

SUSE-SU-2026:4294-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

CVE-2026-91811 Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

EUVD-2026-85163

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

CVE-2026-91811 Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

CVE-2026-91811

Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability within its PRC parser . The vulnerability is caused by insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation of this flaw could lead to memory corruption and an applicatio...

CVE-2026-95958

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

CVE-2026-95958

A security flaw exists in JusticeRage Manalyze 1.0.0 within the PE Parser component. Specifically, the PE::_parse_relocations function in the file manape/pe.cpp is vulnerable to an integer underflow triggered by manipulating the BlockSize argument. This vulnerability requires a local approach for...

EUVD-2026-85013

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...