FreeRDP resource management error vulnerability

Versions of FreeRDP prior to 3.32.2 contain a resource management error vulnerability. This vulnerability stems from a double-free issue in the WinPR Kerberos SSPI retrieveSomeTgt function. Unauthenticated remote attackers can send specially crafted NLA/CredSSP u2u TGT requests containing an '@' ...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS versions prior to 27.2, and Apple tvOS versions prior to 27.2...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, and Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems fr...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because multiple parsers fail to enforce limits on the size and decompression output declared by clients, potentially leading to disproportionate memory usage and process crashes...

Pillow buffer error vulnerability

Versions 9.4.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises when the ImagingJpegEncode function calls jpegwritemarker for JPEG COM annotations; specifically, when the ICC configuration file fills the encoding buffer exactly to 65536 bytes. Libjpeg write...

Pillow improper exception handling vulnerabilities

Pillow versions from 10.0.0 to 13.0.0 have a security vulnerability. This vulnerability arises when using the outline renderer for FreeType rendering. After the FTLoadGlyph function fails, the cleanup process may call FTDoneGlyph on glyph variables that are not initialized or invalid. Attackers c...

Pillow Resource Management Error Vulnerability

Versions of Pillow prior to 13.0.0 have a resource management vulnerability. This vulnerability arises when ImagingScaleAffine encounters a failure in selective memory allocation during operations involving Transform.EXTENT or Transform.AFFINE. As a result, image memory is released twice, and und...

Pillow buffer error vulnerability

Pillow versions from 8.2.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability stems from the tiled-TIFF decoder, which reads beyond the bounds of the tile buffer when copying four-byte pixels. In decodeTile, the tile allocation returned by libtiff is less than the required row...

SpatiaLite resource management error vulnerability

SpatiaLite 5.1.0 and earlier versions have a resource management vulnerability. This vulnerability stems from ParseWkbPolygon not verifying the number of looped edges in polygons. Attackers can exploit this by using specially crafted geometry BLOBs to trigger uncontrolled internal loop assignment...

HPE NonStop SQL/MX Executor buffer error vulnerability

The HPE NonStop SQL/MX Executor T1051L40 and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow. This vulnerability may lead to information disclosure or process crashes...

AlmaLinux 9.6 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.6:CLSA-2026:1785154072)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785154072 advisory. - Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impac...

PT-2026-95903

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.7 Description A use-after-free flaw exists in the Http2ThreadMultiBuf component. This occurs when the system inspects HTTP/2 transactions using rules that apply http.response header both with and without a...

PT-2026-93839

Name of the Vulnerable Software and Affected Versions node-opcua versions 2.0.0 through 2.169.0 Description A combination of bugs in the client implementation leads to unlimited TCP socket accumulation in the FIN-WAIT-2 state during automatic reconnection, resulting in memory exhaustion and proce...

CVE-2026-89266

stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...

DEBIAN-CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059: Out-of-bounds Write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-69242: Heap-based Buffer Overflow

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...