337 matches found
UBUNTU-CVE-2026-46520
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23...
CVE-2026-42326
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...
CVE-2026-45664
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
CVE-2026-45359
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation. This issue has been...
UBUNTU-CVE-2026-10143
kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, ScramClient.processserverfirstmessage...
MINI-P9FQ-345W-6HXC
Bulletin has no description...
PT-2026-51160
Name of the Vulnerable Software and Affected Versions jq versions prior to 1.8.2 Description In assertion-disabled builds, the jq --rawfile command can lead to invalid-state reuse and a heap out-of-bounds write. This occurs when the jv load fileraw=1 function reads an attacker-controlled file and...
CVE-2026-47321
Unknown description...
MINI-V2XR-FQ44-FQVP
Bulletin has no description...
PT-2026-50581
Name of the Vulnerable Software and Affected Versions HTML::Gumbo versions prior to 0.19 Description Type confusion occurs when the walk tree function in lib/HTML/Gumbo.xs fails to properly handle the element. This element is incorrectly treated as a text node, causing strlen to over-read the hea...
ECHO-4F76-EB2B-D9B9
Bulletin has no description...
MINI-87HG-QRCP-WX9X
Bulletin has no description...
UBUNTU-CVE-2026-48095
7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to cause arbitrary code execution or application...
CVE-2026-49837
Unknown description...
MINI-Q9F7-J7P9-5XV5
Bulletin has no description...
PT-2026-49152
Name of the Vulnerable Software and Affected Versions GoBGP affected versions not specified Description GoBGP contains a BGP OPEN capability parsing issue where several concrete capability decoders parse data from the full remaining capability buffer instead of the slice bounded by the declared...
CVE-2026-41436
hw/uefi: verify pioxferoffset before calculating buffer checksum...
CVE-2026-8341
hw/uefi: check auth.hdrlength minimum size...