USN-8035-1 libpng1.6 vulnerabilities

It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial transparency and gamma correction. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a...

Autodesk 3ds Max < 2026.3.2 Multiple Vulnerabilities

The version of Autodesk 3ds Max installed on the remote Windows host is prior to 2026.3.2. It is, therefore, affected by the following vulnerabilities: - A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor...

CVE-2026-0537

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0661

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0661

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0537

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0661

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0661

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0661

CVE-2026-0661 is described across multiple sources as an issue in Autodesk 3ds Max where parsing a malicious RGB file can cause a memory corruption/Out-of-Bounds Write vulnerability, enabling arbitrary code execution in the context of the current process. The affected software is Autodesk 3ds Max...

CVE-2026-0537 RGB File Parsing Memory Corruption

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0537

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0537

CVE-2026-0537 describes a memory corruption vulnerability in Autodesk 3ds Max triggered by parsing a malicious RGB file, potentially allowing arbitrary code execution in the affected process. Connected documents identify this as part of a set of issues for 3ds Max

PT-2026-6016

Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max affected versions not specified Description A specially designed RGB file, when processed by Autodesk 3ds Max, can lead to a memory corruption issue. An attacker could potentially use this to run code without permission within...

CVE-2026-0661: Out-of-bounds Write

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-0537: Out-of-bounds Write

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

libheif:file_fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4672718229536768 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2023-52661)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52661 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clkp...

libheif:file_fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6208605480353792 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

MiracleLinux 7 : giflib-4.1.6-9.0.1.el7.AXS7 (AXSA:2025-11108:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-11108:01 advisory. CVE-2023-48161: fix Buffer Overflow vulnerability in DumpSCreen2RGB function CVEs: CVE-2023-48161 Buffer Overflow vulnerability in GifLib Project GifLib...

CVE-2021-0689

In RGBtoBGR1portable of SkSwizzleropts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...