PT-2026-99144

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.5 Description A stack-based out-of-bounds write occurs in the decompiler's leftshift128 function when processing negative shift amounts from p-code. An attacker can craft malicious binaries with specific instructi...

CVE-2026-100549: Improper Limitation of a Pathname to a Restricted Directory

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended...

CVE-2026-100520: Improper Limitation of a Pathname to a Restricted Directory

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

CVE-2026-100625: Unintended Proxy or Intermediary

Capgo capgo.app exposes a native build TUS upload proxy supabase/functions/backend/public/build/upload.ts that authorizes a caller against a single build job identified by the supplied builderjobid and validates only that job's stored uploadpath, but then forwards the user-controlled TUS resource...

CVE-2026-100504: Out-of-bounds Write

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

PT-2026-99353

Name of the Vulnerable Software and Affected Versions Budibase Server versions prior to 3.45.0 Description An arbitrary file write issue exists in the PWA icon upload endpoint. The system extracts user-supplied ZIP archives without proper symlink validation. Users with the BUILDER role can create...

openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21935-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21935-1 advisory. This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in...

openSUSE 16: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix3 / etc (openSUSE-SU-2026:21938-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21938-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read...

openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21959-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21959-1 advisory. Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276233 - CVE-2026-18301: GIMP...

SUSE CVE-2026-88370

libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled loadinibuffer.h utility and stripinicache. The bundled utility allocates exactly inilength bytes, while stripinicache unconditionally writes a NUL terminator at inisourceinilength, requiring an additional writab...

SUSE CVE-2026-88378

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...

SUSE CVE-2026-98107

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of-bounds write in l2capecredconnect l2capchanconnect tries to ensure there are no more than L2CAPECREDCONNSCIDMAX pending ECRED channels, so they fit in the same L2CAPECREDCONNREQ that l2capecredconnect...

SUSE CVE-2026-98108

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LECONNREQ + EXTFLOWCTL pchan l2capnewconnection sets default value of channel mode to match the parent channel. l2capleconnectreq left this at the default, and created L2CAPMODEEXTFLOWCTL...

CVE-2026-10758

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

AZL-105081 CVE-2026-10758 affecting package liblerc 4.0.0-3

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758 Esri Lerc has a security vulnerability

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758 Esri Lerc has a security vulnerability

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758

The Esri LERC open-source image or raster format is vulnerable to a Heap based Out-of-Bounds Write caused by an Integer Overflow . This flaw affects LERC versions 4.1.0 and earlier . A remote, unauthenticated attacker can exploit this by providing specifically crafted imagery to an application us...

EUVD-2026-87360

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...