SUSE CVE-2026-16473

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...

EUVD-2026-47623

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...

ROS-20260714-73-0054

The vulnerability of the codecsbcdecode function in the SBC analyzer of Wireshark, a computer network analysis tool, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

PT-2026-58862

Name of the Vulnerable Software and Affected Versions OpenHTJ2K versions prior to 0.18.5 Description A buffer overflow exists that allows an attacker to execute arbitrary code. The issue occurs within the j2k precinct subband::parse packet header function located in source/core/coding/coding...

EUVD-2026-26459

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution...

openjph:ojph_expand_fuzz_target: Null-dereference READ in ojph::local::subband::pull_line

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=6471100476489728 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

speex:speex_decode_fuzzer_fixed: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=6142339463577600 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfixed Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5727693351682048 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000024000 Crash State: grk::Subband::Subband...