CVE-2026-93586

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact e.g., a crash of the affected process. The issue is fixed in versions...

CVE-2026-93019

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-93019 Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

EUVD-2026-82927

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-93019

The Imager Perl module (versions before 1.036 ) is vulnerable to a Denial of Service (DoS) due to an unsigned to signed conversion error . When processing a TGA image, the tga_palette_read function unpacks a two-byte color map length into a signed short . If the length is 32768 or more , the valu...

CVE-2026-93586 ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact e.g., a crash of the affected process. The issue is fixed in versions...

CVE-2026-93586 ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact e.g., a crash of the affected process. The issue is fixed in versions...

CVE-2026-93586

ImageMagick versions prior to 7.1.2-31 and 6.9.13-56 contain a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. The impact is limited to availability—exploit may cause a crash of the affected process , with no stated confidentiality or in...

Exploit for CVE-2009-3103

MS09-050 — SMBv2 Remote Code Execution Exploit CVE-2009-310...

SUSE CVE-2026-84635

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-46655: Heap-based Buffer Overflow

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

PT-2026-95396

Name of the Vulnerable Software and Affected Versions Imager for Perl versions prior to 1.036 Description Processing a TGA file with a colour map length of 32768 or more triggers an uncatchable process exit when using the Imager-read function. This occurs because the reader unpacks the two-byte...

PT-2026-95365

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description A use-after-free issue exists in the ImagesToBlob function, where a pointer is not updated correctly. This can lead to a crash of the affected process,...

PT-2026-95497

Name of the Vulnerable Software and Affected Versions Process Compose versions prior to 1.120.0 Description Process Compose is a scheduler and orchestrator for non-containerized applications. The MCP SSE listener in src/mcp/server.go accepts browser-origin requests to the /sse endpoint and the...

PT-2026-95475

Name of the Vulnerable Software and Affected Versions Mojolicious versions prior to 9.47 Description The pure-Perl implementation of Mojo::JSON fails to limit nesting depth when the MOJO NO JSON XS variable is enabled or when Cpanel::JSON::XS is unavailable. An attacker can provide untrusted JSON...

CVE-2026-75894: Reachable Assertion

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranaphandlecodt function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service...

CVE-2026-77339: Missing Authentication for Critical Function

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

CVE-2026-55556: Heap-based Buffer Overflow

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

PT-2026-102716

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse auth header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passe...

PT-2026-95706

Name of the Vulnerable Software and Affected Versions microsandbox versions prior to 0.5.10 Description The software serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments within sdk/rust/lib/runtime/spawn.rs and...