CVE-2026-125192 FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized Buffer

FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows attackers to disclose heap memory via crafted DXA files. Attackers can supply a DXA video with a type 4 frame that copies the uninitialized decompbuf buffer into output pictures,...

CVE-2026-125192 FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized Buffer

FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows attackers to disclose heap memory via crafted DXA files. Attackers can supply a DXA video with a type 4 frame that copies the uninitialized decompbuf buffer into output pictures,...

CVE-2026-125192 FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized Buffer

FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows attackers to disclose heap memory via crafted DXA files. Attackers can supply a DXA video with a type 4 frame that copies the uninitialized decompbuf buffer into output pictures,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTRDRBG drbgctrgenerate sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

CVE-2026-120247

A flaw was found in FFmpeg. An attacker can achieve information disclosure by providing a specially crafted Huffyuv video stream with truncated data. Due to the use of an uninitialized buffer in the Huffyuv decoder, uninitialized heap memory is copied into the decoded output frames, exposing...

pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

CVE-2026-99114

A flaw was found in the Linux kernel's ksmbd, an in-kernel Server Message Block SMB file server. This vulnerability allows an information disclosure where residual data from previous responses can be leaked to a client. A remote client can exploit this flaw by sending crafted compound requests,...

SUSE CVE-2026-98951

In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves the rest of the stack buffer uninitialized. In riscvvrset that garbage ...

CVE-2026-80791

A flaw was found in the Linux kernel's nvmet-auth subsystem. During the pre-authentication handshake, a remote attacker can exploit an issue where the system allocates a response buffer but only partially initializes it. The uninitialized portion of this buffer is then transmitted to the remote...

CVE-2026-98951

In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves the rest of the stack buffer uninitialized. In riscvvrset that garbage ...

Linux Distros Unpatched Vulnerability : CVE-2026-98951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves th...

CVE-2026-112897

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

Red Hat: CVE-2026-112897: pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The decodeStrip and decodeTile buffers can be larger than the bytes written by libtiff, but Pillow conver...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...

Information Disclosure

postgresql is vulnerable to information disclosure. The vulnerability is due to uninitialized buffer bytes being used to pad values shorter than their declared length, where SQL statements and parameter values from previous operations on the same connection can be stored in the database and expos...

CVE-2026-98325

A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during...