Linux Distros Unpatched Vulnerability : CVE-2026-110596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted...

CVE-2026-110596

A flaw was found in quirc. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted QR code image. When processing manipulated patterns within the image, the library enters an excessive loop during alignment calculations. This behavior exhausts syste...

UBUNTU-CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

DEBIAN-CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

EUVD-2026-101224

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-110596

quirc versions through 1.2 are vulnerable to a Denial of Service (DoS) via an excessive-iteration flaw in the find_alignment_pattern() function located in lib/identify.c. An attacker can provide a crafted image with three arranged finder patterns that produce a near-degenerate perspective transfo...

CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

PT-2026-114038

Name of the Vulnerable Software and Affected Versions quirc versions prior to 1.3 Description An excessive-iteration issue exists in the find alignment pattern function within lib/identify.c. An attacker can provide a specially crafted QR image with three finder patterns that create a...

CVE-2026-110596: Excessive Iteration

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

CVE-2026-66041

A flaw was found in FFmpeg's vfquirc filter, which handles subtitle processing. A remote attacker can exploit this heap out-of-bounds write vulnerability by providing a specially crafted PGS/SUP subtitle file. This file, with mismatched frame dimensions, can cause the software to write data beyon...

SUSE CVE-2026-66041

FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vfquirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose seco...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the vfquirc filter. An attacker can corrupt heap memory and potentially execute arbitrary code by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions, where the second presentation has large...

CVE-2026-66041

FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vfquirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose seco...

UBUNTU-CVE-2026-66041

FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vfquirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose seco...