CVE-2026-65969

A flaw was found in OpenImageIO. A local attacker could trick a user into processing a specially crafted truncated TGA image. This could lead to a signed overflow in the gifsplitpalette function, corrupting internal data and causing an out-of-bounds read. The result is a process crash and a denia...

CVE-2026-71855

A flaw was found in Suricata. This flaw allows a remote attacker to cause an IPv4 and IPv6 flow to be treated as identical due to a hash collision. This occurs when their raw address words, ports, protocol, VLAN, recursion level, live device, and hash bucket align, without proper comparison of th...

CVE-2026-63635

A flaw was found in OpenImageIO. A remote attacker could exploit this by crafting a malicious PSD Photoshop Document file with an invalid color mode. When processed by OpenImageIO with raw color or raw data enabled, this crafted file bypasses validation, leading to an out-of-bounds read and...

CVE-2026-63451

A flaw was found in Suricata, a network Intrusion Detection System. A local user can craft a detection rule that combines frame inspection without content and a transformed match without content. Loading this specially crafted rule can trigger a heap buffer overflow, leading to a denial of servic...

CVE-2026-63448

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A remote attacker can exploit this vulnerability by sending sustained one-directional Server Message Block SMB traffic. This causes the SMB parser t...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

CVE-2026-63420

A flaw was found in OpenImageIO. When processing an indexed Photoshop Document PSD image containing transparency metadata with oiio:rawcolor or psd:rawdata enabled, the interleaverow function attempts to read data beyond the bounds of allocated memory. This heap out-of-bounds read can lead to a...

CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

CVE-2026-61720

A flaw was found in FluidSynth, a software synthesizer. A remote attacker could exploit an unsigned integer underflow vulnerability in the SoundFont 2 SF2 parser by providing a specially crafted SF2 file. This file, containing a zero-sized DMOD chunk, causes the parser to attempt an excessive...

CVE-2026-59956

A flaw was found in OpenImageIO. When processing an uncompressed 16-bit IFF Image File Format image with a z-buffer, the iffinput::readimg function allocates a temporary scanline buffer that is smaller than required. This leads to an oversized memory copy operation that reads beyond the allocated...

CVE-2026-59181

A flaw was found in OpenImageIO. A specially crafted Cineon image file, when processed by OpenImageIO, can cause a stack buffer overflow. This vulnerability allows an attacker to trigger memory corruption, which can lead to a denial of service DoS by making the application unresponsive or crash...

CVE-2026-57224

A flaw was found in Suricata. The DHCP and RDP parsers fail to record packet direction for stateless transactions. This allows a network sensor observing only one direction of traffic to accumulate an unbounded list of per-flow transactions. Consequently, this leads to increasing CPU and memory...

CVE-2026-57222

A flaw was found in Suricata. This vulnerability allows a remote attacker to cause an incorrect detection state by sending specially crafted IPv4 and IPv6 address pairs. The flaw occurs because the system's IPPair hash does not properly compare the IP address family, leading to the reuse of state...

CVE-2026-59156

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. A remote attacker could exploit this vulnerability by providing a specially crafted Flexible Image Transport System FITS stream. This stream, containing consecutive header blocks without the mandatory...

CVE-2026-57229

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. The SMTP Simple Mail Transfer Protocol MIME Multipurpose Internet Mail Extensions parser does not fully reset its state when processing encapsulated...

CVE-2026-57223

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. On Windows, the service installation logic can pass an unquoted service ImagePath. This allows a local low-privileged attacker to execute arbitrary code...

CVE-2026-50291

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted BMP Bitmap image file. Processing this malicious file can lead to an invalid read operation during image decoding, causing the application to...

CVE-2026-71418

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. Its DNS-over-HTTP/2 processing incorrectly retains previously processed HTTP/2 DATA frame contents. A remote attacker can exploit this by sending multiple craft...

CVE-2026-67549

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by tricking a user into processing a specially crafted 1-bit CMYK TIFF image. The tiffinput::bitconvert function incorrectly writes 8-bit output into a smaller buffer allocated for 1-bit data, causing a heap...

CVE-2026-63638

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by providing a specially crafted Cineon image file. This crafted file, when processed, can lead to a heap out-of-bounds write due to an invalid bit depth declaration, resulting in memory corruption. This could...

CVE-2026-63446

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. Due to an inverted guard in the AppLayerParserSetTransactionInspectId function, transactions on flows passed by a pass rule or exception policy are not...

CVE-2026-63419

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. When processing specially crafted IFF Image File Format ZBUFFER tiles, the iffinput::readnativetile function may incorrectly handle pixel data sizes. This can lead to a heap out-of-bounds write, resulti...

CVE-2026-61721

A flaw was found in FluidSynth, a software synthesizer. The native DLS Downloadable Sounds loader, responsible for processing sound samples, does not properly validate certain values within crafted DLS files. This oversight allows an attacker to define sample loop points that extend beyond the...

CVE-2026-63452

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit this vulnerability by sending repeated, small Brotli compressed responses to the HTTP/1 parser. This can cause the system to perform expensive decompression...

CVE-2026-63422

A flaw was found in OpenImageIO. When processing specially crafted tiled OpenEXR images, where the image width is not a multiple of its tile width, a heap out-of-bounds write can occur. This vulnerability arises from incorrect calculation of scanline stride during tile reading, leading to memory...

CVE-2026-57227

A flaw was found in Suricata. The MQTT parser in Suricata permits repeated PUBREC or PUBREL messages to be appended to a transaction without a limit. A remote attacker can send crafted MQTT traffic to grow the transaction state indefinitely, consuming excessive CPU and memory resources. This can...

CVE-2026-57228

A flaw was found in Suricata. A heap out-of-bounds read vulnerability exists in the SMTP MIME quoted-printable decoder. A remote attacker can send specially crafted SMTP traffic, causing a quoted-printable escape sequence to be split across traffic chunks. This can lead to a one-byte read past a...

CVE-2026-61714

A flaw was found in FluidSynth, a software synthesizer. When the synth.midi-channels configuration is set above 16, the MIDI player can write beyond the allocated memory for tracking active channels. This heap buffer overflow can lead to out-of-bounds memory access, potentially compromising the...

CVE-2026-54355

A flaw was found in MapServer, a system for developing web-based GIS applications. This reflected Cross-Site Scripting XSS vulnerability occurs in the OpenLayers HTML output when the HTTPXFORWARDEDHOST value is not properly escaped. An unauthenticated attacker can craft a malicious URL that, when...

CVE-2026-54354

A flaw was found in MapServer, a system for developing web-based Geographic Information System GIS applications. The PostGIS runtime filter translation incorrectly processes attacker-controlled input as numeric without proper validation. This allows an unauthenticated remote attacker, with access...

CVE-2026-93590

A flaw was found in ImageMagick's UHDR encoder. This vulnerability allows a remote attacker to bypass resource policies by processing specially crafted UHDR images. The flaw occurs because the encoder fails to perform necessary policy checks during buffer allocation for image pixels, potentially...

CVE-2026-93588

A flaw was found in ImageMagick. When the PNM coder processes a specially crafted or sufficiently large image, it can reach a memory resource limit. The application fails to handle the memory allocation, leading to a null pointer dereference. This can result in a denial of service, causing the...

CVE-2026-93586

A flaw was found in ImageMagick. A use-after-free vulnerability exists in the ImagesToBlob method due to an incorrectly updated pointer. A local attacker could exploit this vulnerability, leading to a limited availability impact, such as a crash of the affected process. Mitigation To mitigate thi...

CVE-2026-93587

A flaw was found in ImageMagick. A local user, by supplying a specific command line option to the PCD, CUBE, or HALD image decoders, can bypass configured resource limits. This policy bypass allows for extra memory allocation, enabling the user to exceed the intended memory policy limit. The most...

CVE-2026-93658

A flaw was found in uutils coreutils. When installing files, the software applies setuid or setgid permissions before finalizing ownership changes. This can allow a privileged user to inadvertently leave behind executable files with elevated privileges if the ownership change operation fails on...

CVE-2026-93589

A flaw was found in ImageMagick. This vulnerability, located in the FLIF encoder, is caused by an incorrect value for 'ticks per second' in an image being encoded. This can lead to a division-by-zero error, causing the encoder to crash and resulting in a denial of service, which means the softwar...

CVE-2026-93314

A flaw was found in Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the segCnt argument within the FoFiTrueType::mapCodeToGID function. This could potentially lead to information disclosure, data corruption, or denial of service. Mitigation To mitigate...

CVE-2026-93313

A flaw was found in Poppler. This vulnerability, an integer overflow, occurs within the JBIG2Stream::readCodeTableSeg function when processing specially crafted JBIG2 image data. A remote attacker could exploit this by providing specially crafted input, which may lead to memory corruption. This...

CVE-2026-93312

A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the JBIG2Stream::rewind function. This could lead to a denial of service DoS, making the application unavailable to legitimate users. Mitigation Since Poppler is a library used by...

CVE-2026-93311

A flaw was found in Freedesktop Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the BitsPerSample argument within the SampledFunction::SampledFunction function. This manipulation could lead to an integer overflow, potentially causing a denial of service...

CVE-2026-96269

A flaw was found in GNU Emacs. A remote attacker could achieve arbitrary code execution by tricking a user into opening a specially crafted file. This vulnerability arises because an untrusted value of read-symbol-shorthands affects the intern and unintern functions, allowing for code execution...

CVE-2026-88807

A flaw was found in libXrender. Malicious X servers can exploit a heap overflow vulnerability in the RenderQueryPictFormats function. This allows them to inject arbitrary code into connected X clients, potentially leading to unauthorized control over the client's system. Mitigation Mitigation for...

CVE-2026-88806

A flaw was found in libX11. A heap-based buffer overflow vulnerability exists during the handling of XkbGetMap replies. A remote attacker, by operating a malicious X server, could exploit this flaw to potentially execute arbitrary code or cause a denial of service on the client system. User...

CVE-2026-88341

A flaw was found in YARA. A remote attacker could exploit this vulnerability by providing a specially crafted compiled rule file .yrc with an invalid arena configuration. This malicious file, when loaded, triggers an assertion failure, leading to the application's termination. This results in a...

CVE-2026-88340

A flaw was found in YARA. This invalid pointer release vulnerability occurs during the deserialization of compiled rule files .yrc. An attacker can exploit this by providing a specially crafted .yrc file, leading to insufficient validation of external-variable pointers. This can result in memory...

CVE-2026-63279

A flaw was found in LibreOffice. When importing a specially crafted PICT image embedded in a document, an out-of-bounds read vulnerability exists. This occurs because the palette index in the image data is not validated against the actual size of the color palette. A remote attacker could exploit...

CVE-2026-63278

A flaw was found in LibreOffice. A remote attacker could craft a malicious document containing specially constructed URLs. When a user opens this document, these URLs could expand environment variables or INI file values, leading to the exfiltration of potentially sensitive information to a remot...

CVE-2026-63273

A flaw was found in LibreOffice Draw. This vulnerability allows a remote attacker to cause a denial of service by crafting a specially designed encrypted PDF document. When a user opens this malicious document, a heap buffer overflow occurs because the software incorrectly handles the decryption...

CVE-2026-63272

A flaw was found in LibreOffice. When processing embedded Windows Metafile WMF graphics, a heap buffer overflow can occur during the import of text records. This vulnerability arises because the application reads the character advance values and text length independently, which can lead to a...

CVE-2026-61548

A flaw was found in Rsyslog, a system for log processing. A remote unauthenticated attacker could exploit a stack buffer overflow vulnerability within the optional mmpstrucdata plugin. By sending a specially crafted RFC5424 message containing an oversized structured-data parameter, the attacker c...