CVE-2026-125261

A flaw was found in FFmpeg. An out-of-bounds read can occur in the SGI Silicon Graphics Image encoder when transcoding a specially crafted video to SGI images, specifically a video that triggers an autorotate vflip, due to improper handling of negative linesizes. This vulnerability can lead to an...

Linux Distros Unpatched Vulnerability : CVE-2026-125261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables...

UBUNTU-CVE-2026-125261

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

CVE-2026-125261

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

CVE-2026-125261 FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

CVE-2026-125261 FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

PT-2026-141089

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode frame in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

CVE-2026-125261: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode_frame() in…

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encodeframe in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process’s page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-120431

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

DEBIAN-CVE-2026-120431

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

CVE-2026-120431

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

CVE-2026-120431

The Netpbm image processing library contains a heap-based buffer overflow in the sgitopnm component's readChannels() function. This vulnerability occurs when processing RLE-compressed SGI images with crafted files containing oversized offset table lengths. An attacker can exploit this to write co...

EUVD-2026-115240

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

PT-2026-135447

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

CVE-2026-120431: Netpbm: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in…

Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146619 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process...

CVE-2026-90383

A flaw was found in the Linux kernel's SGI GRU Graphics Resource Unit TLB Translation Lookaside Buffer miss handler. This handler incorrectly walks a process's page tables without holding necessary locks or references, and uses kernel page-table accessors on user page tables. This could allow a...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...