UBUNTU-CVE-2026-54354

MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and metadata such as gmltype=Integer are configured, b...

CVE-2026-54354

CVE-2026-54354 is a SQL injection vulnerability in MapServer prior to version 8.6.4 , affecting the PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter(). When a connection type of POSTGIS is configured with metadata such as gml__type=Integer, the code treat...

kimageformats:kimgio_avif_fuzzer: Dynamic-stack-buffer-overflow in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5993987163947008 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioaviffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Addres...

OSV-2020-902 Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266 Crash type: Index-out-of-bounds Crash state: QUnicodeTables::qGetProp QString QUnicodeTables::convertCase QString::toLowerhelper...

PT-2020-22618

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the QUnicodeTables::qGetProp function, QString...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5763219051773952 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5710491000766464 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

karchive/karchive_fuzzer: Stack-buffer-overflow in QString::fromLocal8Bit

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5661125477138432 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...