CVE-2026-84451

A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...

CVE-2026-81883

A flaw was found in radare2, a reverse engineering framework. The Lua 5.3 bytecode function parser did not properly validate the length of function-metadata fields after a function-name string. By opening or inspecting a specially crafted Lua 5.3 bytecode file, a local user could trigger an...

CVE-2026-81881

A flaw was found in radare2, a reverse engineering framework. Its Mach-O Swift metadata parser contains a heap out-of-bounds read vulnerability. By processing a specially crafted Mach-O file, a local user could trigger an error that causes the application to terminate. This leads to a denial of...

CVE-2026-81879

A flaw was found in radare2, a UNIX-like reverse engineering framework. The ELF parser incorrectly handles program-header array allocation and iteration. When processing a specially crafted ELF file, the parser may iterate beyond the allocated program-header array due to a mismatch between the...

CVE-2026-95627

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

CVE-2026-79616

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

DEBIAN-CVE-2026-79616

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

AZL-106830 CVE-2026-79616 affecting package qtdeclarative 6.6.1-2

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

CVE-2026-79616

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

UBUNTU-CVE-2026-79616

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

EUVD-2026-85183

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

CVE-2026-79616

The Qt Quick framework is vulnerable to an out-of-bounds read occurring while parsing untrusted SVG path strings within the Context2D.path and PathSvg.path components. The vulnerability stems from improper handling of path data during the parsing process. This flaw may result in a high impact on ...

CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

CVE-2026-79616

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path...

EUVD-2026-85181

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

CVE-2026-95627

A vulnerability in the Tauri framework v2 dialog plugin allows an attacker with JavaScript execution (XSS) to manipulate the file or folder picker. The attacker can force the scope expansion to be recursive , granting unauthorized read/write access to an entire directory tree. This occurs after a...

CVE-2026-95627 Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

CVE-2026-95627 Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

OPENSUSE-SU-2026:21933-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. - CVE-2026-41677: out-of-bounds read in PEM password callback when returning an oversized length in...