Siemens SIMATIC S7-1500 TM MFP Out-of-bounds Read (CVE-2026-43112)

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath When cifssanitizeprepath is called with an empty string or a string containing only delimiters e.g., '/', the current logic attempts to check cursor2 - 1 before cursor2...

K000163575: Python vulnerabilities CVE-2026-4360 and CVE-2026-57585

Security Advisory Description CVE-2026-4360 In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing...

libhevc:hevc_dec_fuzzer: Segv on unknown address in ihevcd_jobq_deinit

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=5127191017619456 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id:...

Rocky Linux 8 [CIQ] Security Update: fribidi / fribidi-debuginfo / fribidi-debugsource / fribidi-devel Multiple Vulnerabilities (crlsa-2022_7514)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227514 advisory. fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 fribidi: SEGV in...

Rocky Linux 9 [CIQ] Security Update: fribidi / fribidi-debuginfo / fribidi-debugsource / fribidi-devel Multiple Vulnerabilities (crlsa-2022_8011)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228011 advisory. fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 fribidi: SEGV in...

Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2026:1781518876)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781518876 advisory. - libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in...

AlmaLinux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2026:1781518876)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781518876 advisory. - libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in...

CVE-2026-84449 libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, OpRGB2432toYCbCr::convertcolorspace stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heifimagecreate and heifimageaddplane. The resulting wrapped stride caus...

CVE-2026-84449 libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, OpRGB2432toYCbCr::convertcolorspace stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heifimagecreate and heifimageaddplane. The resulting wrapped stride caus...

Security Bulletin: JVM crash (SEGV) in IBM Java SDK affect IBM Tivoli Business Service Manager and IBM Tivoli Netcool Impact

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager and IBM Tivoli Netcool Impact. Information about security vulnerability affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer t...

Security Bulletin: IBM Java JVM Crash (SEGV) Vulnerability Affecting IBM OpenPages

Summary IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Java has been published in multiple security bulletins. The applicable CVEs have been addressed in the affected products. For a complete list of...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457...

libpg_query:fuzz_protobuf: Segv on unknown address in deparseStringLiteral

Project: https://github.com/pganalyze/libpgquery.git Detailed Report: https://oss-fuzz.com/testcase?key=4996700520120320 Project: libpgquery Fuzzing Engine: libFuzzer Fuzz Target: fuzzprotobuf Job Type: libfuzzerasanlibpgquery Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

Updated jbig2dec packages fix security vulnerabilities

Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2error at /jbig2dec/jbig2.c. CVE-2023-46361 An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-3807...

SUSE-SU-2026:23309-1 Security update for libarchive

This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory bsc1254340 - Fix out-of-bounds buffer overrun when using pHLEVELOFFSET bsc1254341 - Fix buffer overrun in archivele32dec when reading truncated 7zip headers bsc1254342 - Fix NULL pointer...

Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

OSV-2026-1125 Segv on unknown address in match_many_CHARACTER_REV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543352138 Crash type: Segv on unknown address Crash state: matchmanyCHARACTERREV countone basicmatch...

mrab-regex:fuzz_regex: Segv on unknown address in match_many_CHARACTER_REV

Project: https://github.com/mrabarnett/mrab-regex.git Detailed Report: https://oss-fuzz.com/testcase?key=5386784381665280 Project: mrab-regex Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerasanmrab-regex Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

dlplibs:key6fuzzer: Segv on unknown address in libetonyek::IWORKPath::appendCCurveTo

Detailed Report: https://oss-fuzz.com/testcase?key=5629933473366016 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: key6fuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: libetonyek::IWORKPath::appendCCurveTo...

shaderc:shaderc_fuzzer: Segv on unknown address in glslang::TPpContext::tokenPaste

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=4724706767601664 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: shadercfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...