4466 matches found
RLSA-2026:0130 Moderate: poppler security update
Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in Poppler CVE-2025-32365 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...
CVE-2025-66837
CVE-2025-66837 concerns ARIS 10.0.23.0.3587512, where a file upload vulnerability in the upload handling could allow an attacker to execute arbitrary code by submitting a crafted PDF file containing malware. The NVD entry lists a CVSSv3.1 base score of 6.8 (Medium) with network attack vector, hig...
Important: libpng security update
The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security Fixes: libpng: LIBPNG buffer overflow CVE-2025-64720 libpng: LIBPNG heap buffer overflow CVE-2025-65018 libpng: LIBPNG out-of-bounds read in...
libpng: LIBPNG heap buffer overflow
A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...
libpng: LIBPNG buffer overflow
A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...
ALSA-2026:0126 Moderate: poppler security update
Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in Poppler CVE-2025-32365 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...
PT-2026-24133
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap overflow can occur when encoding a PNG image due to an extremely large...
PT-2026-28179
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.2 Description pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause an infinite loop when read in non-strict mode. This issue requires reading a file in non-strict mode. Applying the...
CVE-2025-66866
A flaw was found in BinUtils. An attacker can exploit a vulnerability in the dabitags function within the cp-demangle.c file by providing a specially crafted Portable Executable PE file. This can lead to a Denial of Service DoS, making the affected application unavailable to legitimate users...
CVE-2025-66863
A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable PE file. This can lead to a denial of service, making the affected application unavailable. Mitigation To reduce the risk of exploitation, users should avoid processing...
SUSE CVE-2025-66861
An issue was discovered in function dunqualifiedname in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file...
SUSE CVE-2025-66864
An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...
SUSE CVE-2025-66865
An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...
WordPress Simplebooklet PDF Viewer and Embedder plugin <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Simplebooklet PDF Viewer and Embedder versions = 1.1.2...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
CVE-2025-66864
A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a NULL pointer dereference in the dprintcompinner function in the cp-demangle.c file, causing a crash and resulting in a denial of service. Mitigation Mitigation for this issue is either not available or...
CVE-2025-66865
A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a stack overflow in the dprintcompinner function in the cp-demangle.c file, causing a crash and resulting in a denial of service. Mitigation Mitigation for this issue is either not available or the...
EUVD-2025-205617
An issue was discovered in function dunqualifiedname in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file...