CVE-2026-81878

A flaw was found in radare2, a UNIX-like reverse engineering framework. The CPython bytecode .pyc marshal parser is vulnerable to an integer overflow. By opening or inspecting a specially crafted .pyc file, an attacker can trigger a heap out-of-bounds write. This can lead to heap memory corruptio...

CVE-2026-81881

A flaw was found in radare2, a reverse engineering framework. Its Mach-O Swift metadata parser contains a heap out-of-bounds read vulnerability. By processing a specially crafted Mach-O file, a local user could trigger an error that causes the application to terminate. This leads to a denial of...

CVE-2026-81879

A flaw was found in radare2, a UNIX-like reverse engineering framework. The ELF parser incorrectly handles program-header array allocation and iteration. When processing a specially crafted ELF file, the parser may iterate beyond the allocated program-header array due to a mismatch between the...

CVE-2026-96442

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code...

CVE-2026-94571

A flaw was found in OpenStack Octavia. An authenticated user who can create or update L7 policies on their own load balancer can inject arbitrary HAProxy configuration directives through the redirecturl or redirectprefix fields. The URL validator does not reject control characters such as tabs an...

CVE-2026-94572

A flaw was found in OpenStack Octavia. The tlsciphers field on listeners and pools does not reject control characters or spaces. An authenticated project member can embed extra text in that field so that HAProxy treats it as additional configuration rather than a cipher list. This can change...

CVE-2026-94056

A flaw was found in Exim. When the Proxy-Protocol is used with an attacker-controlled proxy, an attacker can read certain uninitialized data from stack memory. This information disclosure could potentially expose sensitive data. Mitigation To prevent information disclosure, ensure that Exim is no...

CVE-2026-84447

A flaw was found in libheif, a software library for decoding and encoding HEIF and AVIF image files. A remote attacker could exploit this by providing a specially crafted image file. This crafted file could cause the library to repeatedly process the same image data, leading to excessive use of t...

CVE-2026-84446

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could provide a crafted HEIF file containing malicious sequence timing and edit-list data. This could lead to non-terminating decode loops and unbounded memory allocation, resulting in severe CPU and...

CVE-2026-84444

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. When processing uncompressed tiled images with the WITHUNCOMPRESSEDCODEC enabled, the heifcontextaddimagetile function can accept a specially crafted image tile with mismatched dimensions. This can lead to an...

CVE-2026-84384

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could exploit this vulnerability by providing a crafted HEIF or AVIF file containing malicious metadata or image data. This could cause the application to consume an unbounded amount of memory during...

CVE-2026-63450

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit a vulnerability in the FTP parser where sending a RETR or STOR command before PORT or PASV negotiation is incorrectly treated as a fatal error. This error...

CVE-2026-57226

A flaw was found in Suricata, a network Intrusion Detection System IDS. When the non-default SWF Small Web Format decompression feature is enabled with an unsafe decompression depth, a remote attacker can send a specially crafted SWF response. This can trigger a heap buffer overflow during HTTP S...

CVE-2026-63449

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. The Session Initiation Protocol SIP parser incorrectly handles large SIP message bodies. When a SIP message body exceeds 65,536 bytes, the parser truncates its length, preventing the full...

CVE-2026-57225

A flaw was found in Suricata, a network Intrusion Detection System. A NULL pointer dereference vulnerability exists when loading JSON or NDJSON datasets. This occurs because the system incorrectly assumes a configured valuekey will always resolve to a string. A trusted or untrusted dataset or rul...

CVE-2026-65970

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...

CVE-2026-65969

A flaw was found in OpenImageIO. A local attacker could trick a user into processing a specially crafted truncated TGA image. This could lead to a signed overflow in the gifsplitpalette function, corrupting internal data and causing an out-of-bounds read. The result is a process crash and a denia...

CVE-2026-71855

A flaw was found in Suricata. This flaw allows a remote attacker to cause an IPv4 and IPv6 flow to be treated as identical due to a hash collision. This occurs when their raw address words, ports, protocol, VLAN, recursion level, live device, and hash bucket align, without proper comparison of th...

CVE-2026-63635

A flaw was found in OpenImageIO. A remote attacker could exploit this by crafting a malicious PSD Photoshop Document file with an invalid color mode. When processed by OpenImageIO with raw color or raw data enabled, this crafted file bypasses validation, leading to an out-of-bounds read and...

CVE-2026-63451

A flaw was found in Suricata, a network Intrusion Detection System. A local user can craft a detection rule that combines frame inspection without content and a transformed match without content. Loading this specially crafted rule can trigger a heap buffer overflow, leading to a denial of servic...

CVE-2026-63448

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A remote attacker can exploit this vulnerability by sending sustained one-directional Server Message Block SMB traffic. This causes the SMB parser t...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

CVE-2026-63420

A flaw was found in OpenImageIO. When processing an indexed Photoshop Document PSD image containing transparency metadata with oiio:rawcolor or psd:rawdata enabled, the interleaverow function attempts to read data beyond the bounds of allocated memory. This heap out-of-bounds read can lead to a...

CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

CVE-2026-61720

A flaw was found in FluidSynth, a software synthesizer. A remote attacker could exploit an unsigned integer underflow vulnerability in the SoundFont 2 SF2 parser by providing a specially crafted SF2 file. This file, containing a zero-sized DMOD chunk, causes the parser to attempt an excessive...

CVE-2026-59956

A flaw was found in OpenImageIO. When processing an uncompressed 16-bit IFF Image File Format image with a z-buffer, the iffinput::readimg function allocates a temporary scanline buffer that is smaller than required. This leads to an oversized memory copy operation that reads beyond the allocated...

CVE-2026-59181

A flaw was found in OpenImageIO. A specially crafted Cineon image file, when processed by OpenImageIO, can cause a stack buffer overflow. This vulnerability allows an attacker to trigger memory corruption, which can lead to a denial of service DoS by making the application unresponsive or crash...

CVE-2026-57224

A flaw was found in Suricata. The DHCP and RDP parsers fail to record packet direction for stateless transactions. This allows a network sensor observing only one direction of traffic to accumulate an unbounded list of per-flow transactions. Consequently, this leads to increasing CPU and memory...

CVE-2026-57222

A flaw was found in Suricata. This vulnerability allows a remote attacker to cause an incorrect detection state by sending specially crafted IPv4 and IPv6 address pairs. The flaw occurs because the system's IPPair hash does not properly compare the IP address family, leading to the reuse of state...

CVE-2026-59156

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. A remote attacker could exploit this vulnerability by providing a specially crafted Flexible Image Transport System FITS stream. This stream, containing consecutive header blocks without the mandatory...

CVE-2026-57229

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. The SMTP Simple Mail Transfer Protocol MIME Multipurpose Internet Mail Extensions parser does not fully reset its state when processing encapsulated...

CVE-2026-57223

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. On Windows, the service installation logic can pass an unquoted service ImagePath. This allows a local low-privileged attacker to execute arbitrary code...

CVE-2026-50291

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted BMP Bitmap image file. Processing this malicious file can lead to an invalid read operation during image decoding, causing the application to...

CVE-2026-71418

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. Its DNS-over-HTTP/2 processing incorrectly retains previously processed HTTP/2 DATA frame contents. A remote attacker can exploit this by sending multiple craft...

CVE-2026-67549

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by tricking a user into processing a specially crafted 1-bit CMYK TIFF image. The tiffinput::bitconvert function incorrectly writes 8-bit output into a smaller buffer allocated for 1-bit data, causing a heap...

CVE-2026-63638

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by providing a specially crafted Cineon image file. This crafted file, when processed, can lead to a heap out-of-bounds write due to an invalid bit depth declaration, resulting in memory corruption. This could...

CVE-2026-63446

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. Due to an inverted guard in the AppLayerParserSetTransactionInspectId function, transactions on flows passed by a pass rule or exception policy are not...

CVE-2026-63419

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. When processing specially crafted IFF Image File Format ZBUFFER tiles, the iffinput::readnativetile function may incorrectly handle pixel data sizes. This can lead to a heap out-of-bounds write, resulti...

CVE-2026-61721

A flaw was found in FluidSynth, a software synthesizer. The native DLS Downloadable Sounds loader, responsible for processing sound samples, does not properly validate certain values within crafted DLS files. This oversight allows an attacker to define sample loop points that extend beyond the...

CVE-2026-63452

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit this vulnerability by sending repeated, small Brotli compressed responses to the HTTP/1 parser. This can cause the system to perform expensive decompression...

CVE-2026-63422

A flaw was found in OpenImageIO. When processing specially crafted tiled OpenEXR images, where the image width is not a multiple of its tile width, a heap out-of-bounds write can occur. This vulnerability arises from incorrect calculation of scanline stride during tile reading, leading to memory...

CVE-2026-57227

A flaw was found in Suricata. The MQTT parser in Suricata permits repeated PUBREC or PUBREL messages to be appended to a transaction without a limit. A remote attacker can send crafted MQTT traffic to grow the transaction state indefinitely, consuming excessive CPU and memory resources. This can...

CVE-2026-57228

A flaw was found in Suricata. A heap out-of-bounds read vulnerability exists in the SMTP MIME quoted-printable decoder. A remote attacker can send specially crafted SMTP traffic, causing a quoted-printable escape sequence to be split across traffic chunks. This can lead to a one-byte read past a...

CVE-2026-61714

A flaw was found in FluidSynth, a software synthesizer. When the synth.midi-channels configuration is set above 16, the MIDI player can write beyond the allocated memory for tracking active channels. This heap buffer overflow can lead to out-of-bounds memory access, potentially compromising the...

CVE-2026-54355

A flaw was found in MapServer, a system for developing web-based GIS applications. This reflected Cross-Site Scripting XSS vulnerability occurs in the OpenLayers HTML output when the HTTPXFORWARDEDHOST value is not properly escaped. An unauthenticated attacker can craft a malicious URL that, when...

CVE-2026-54354

A flaw was found in MapServer, a system for developing web-based Geographic Information System GIS applications. The PostGIS runtime filter translation incorrectly processes attacker-controlled input as numeric without proper validation. This allows an unauthenticated remote attacker, with access...

CVE-2026-93590

A flaw was found in ImageMagick's UHDR encoder. This vulnerability allows a remote attacker to bypass resource policies by processing specially crafted UHDR images. The flaw occurs because the encoder fails to perform necessary policy checks during buffer allocation for image pixels, potentially...

CVE-2026-93588

A flaw was found in ImageMagick. When the PNM coder processes a specially crafted or sufficiently large image, it can reach a memory resource limit. The application fails to handle the memory allocation, leading to a null pointer dereference. This can result in a denial of service, causing the...

CVE-2026-93586

A flaw was found in ImageMagick. A use-after-free vulnerability exists in the ImagesToBlob method due to an incorrectly updated pointer. A local attacker could exploit this vulnerability, leading to a limited availability impact, such as a crash of the affected process. Mitigation To mitigate thi...

CVE-2026-93587

A flaw was found in ImageMagick. A local user, by supplying a specific command line option to the PCD, CUBE, or HALD image decoders, can bypass configured resource limits. This policy bypass allows for extra memory allocation, enabling the user to exceed the intended memory policy limit. The most...