17956 matches found
The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.
The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...
SUSE-SU-2026:20527-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-0861: inadequate size check in the memalign suite may result in an integer overflow bsc1256766. - CVE-2026-0915: uninitialized stack buffer used as DNS query name when net==0 in nssdnsgetnetbyaddrr bsc1256822. - CVE-2025-15281:...
RockyLinux 9 : glibc (RLSA-2026:2786)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:2786 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query CVE-2026-09...
CVE-2026-25941 FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read
FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory...
Security update for libjxl
This update for libjxl fixes the following issues: CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory bsc1258090. CVE-2026-1837: a specially crafted file can cause the decoder to write pixel data to uninitialized unallocated memor...
SUSE-SU-2026:0648-1 Security update for libjxl
This update for libjxl fixes the following issues: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory bsc1258090. - CVE-2026-1837: a specially crafted file can cause the decoder to write pixel data to uninitialized unallocated...
SUSE CVE-2026-2794
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148...
OSV-2026-302 Use-of-uninitialized-value in BIO_new_file
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486713209 Crash type: Use-of-uninitialized-value Crash state: BIOnewfile libcrypto.so.3 CONFmodulesloadfileex...
OSV-2026-301 Use-of-uninitialized-value in pcpp::IPv6Extension::getExtensionLen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486705308 Crash type: Use-of-uninitialized-value Crash state: pcpp::IPv6Extension::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer...
The vulnerability of the mpol_rebind_preferred() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the mpolrebindpreferred function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
glibc security update
An update is available for glibc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the PSD format handler when processing a specially crafted file containing ZIP-compressed layer data that decompresses to less than the expected size. An attacker can obtain sensitive information from uninitialize...
Out-of-bounds Read
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
GHSA-96PC-27RX-PR36 ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
Description A heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containing ZIP-compressed layer data that decompresses to less than the expected size, uninitialized heap memory is leaked into the...
CVE-2026-2806
Uninitialized memory in the Graphics: Text component. This vulnerability affects Firefox 148 and Thunderbird 148...
CVE-2026-2806
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...
CVE-2026-2794
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148...
CVE-2026-2794
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability affects Firefox 148...
