CVE-2026-112902

The Pillow Python imaging library (versions through 12.3.0 ) contains a vulnerability in the libtiff TIFF encoder . The encoder can pass arguments to TIFFSetField() that do not match the corresponding tag's definition in libtiff . An attacker can exploit this by providing a specially crafted imag...

CVE-2026-112902 Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata through this encoder, crafted tag values can...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix There is a segfault bug in ruby's big decimal library which can be triggered by users providing known-bad values. If you wish to test whether your application is secure run +example.rb+. This script should exit normally, not segfault. The workaround has negative...

CLEANSTART-2025-GY66443 malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common

Security vulnerability affects the raptor2 package. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

CVE-2022-34556

Description of CVE-2022-34556 PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. Any project or library that uses Picoc also suffers from this issue. An example of this would be picoc-js. Setting up our environment To replicate the null pointer dereference...

sfop

Segmentation Fault-Oriented Programming SFOP This is the artifacts repository for the Segmentation Fault-Oriented Programming exploitation technique. Artifacts Collection Here we briefly describe the artifacts in this repository. In total, there are eight different artifacts, composed of six PoC...

CVE-2022-34913

Description of CVE-2022-34913 md2roff 1.7 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, we must download a vulnerable version of md2roff version 1.7: git clone...

CVE-2026-33307

Modgnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the certificate chain sent by the client into a fixed size gnutlsx509crtt x509 array without checking the number of certificates is less than or...

AlmaLinux 9 : kernel (ALSA-2026:87805)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87805 advisory. kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets CVE-2025-22063 kernel: calipso: Don't call calipso functions for AFINET sk...

Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

============================================================================ Memory disclosure and segfault in libtiff encoder via crafted TIFF tags Location: src/encode.c:1014 in PyImagingLibTiffEncoderNew Commit: a707c6b21c313880d0771e54965d142dd42358b6...

GHSA-XVH5-G6GV-559V Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

============================================================================ Memory disclosure and segfault in libtiff encoder via crafted TIFF tags Location: src/encode.c:1014 in PyImagingLibTiffEncoderNew Commit: a707c6b21c313880d0771e54965d142dd42358b6...

PT-2026-120897

Name of the Vulnerable Software and Affected Versions Pillow versions 5.4.0 through 10.2.0 Description A memory disclosure and segmentation fault issue exists when the software re-saves images as TIFF files using the libtiff encoder. The problem occurs in the PyImaging LibTiffEncoderNew function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: expat (UTSA-2026-142320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142320 advisory. Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers...

curl: OpenSSL provider OSSL_LIB_CTX used after free via the connection shutdown list (CVE-2026-80229 fix incomplete)

Summary: The CVE-2026-80229 fix 7ea37abc6a, 8.22.0 only marks provider connections connclose, but a closed TLS connection is handed to the multi handle's shutdown list lib/conncache.c:242 and outlives its easy handle, while curleasycleanup frees the handle's OSSLLIBCTX osslprovidercleanup,...

Uncontrolled Recursion

Overview symfony/symfony is a PHP framework for web applications and a set of reusable PHP components. Affected versions of this package are vulnerable to Uncontrolled Recursion via the expression parser in Parser.php, which builds a node tree with no bound on nesting depth. An attacker can suppl...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the expression parser in Parser.php, which builds a node tree with no bound on nesting depth. An attacker can supply an expression containing tens of thousands of nested unary operators, array literals, binary...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leakage This patch fixes potential memory leakage and segmentation faults in the gpuvmimportdmabuf function...

Astra Linux – vulnerability in ncurses

ncurses 6.3 prior to patch 20220416 contains an out-of-bounds read and segmentation violation in convertstrings within tinfo/readentry.c in the terminfo library...

Astra Linux – vulnerability in gmp

GNU Multiple Precision Arithmetic Library GMP up to version 6.2.1 contains an integer overflow in mpz/inpraw.c, which can be exploited via specially crafted input to cause a buffer overflow; this results in a segmentation fault on 32-bit platforms...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proccreatesingledata conversion The conversion to proccreatesingledata introduced a regression wherein reading a file in /proc/bus/nubus results in a seg fault: grep -r . /proc/bus/nubus/e/ Data read fault...