CVE-2026-80718

A flaw was found in the Linux kernel. Specifically, within the mm/percpu-km module, the pcpucreatechunk function incorrectly calculates the size of a bitmap used for tracking memory pages. This miscalculation can lead to a bitmap overflow, where data is written beyond the intended memory boundary...

CVE-2026-70654

A flaw was found in libvips, an image processing library. When applications process untrusted uncompressed PPM Portable Pixmap images through unusual custom libvips sources, a heap buffer overflow can occur. This vulnerability, located in the vipssourcereadtomemory function, allows a local attack...

CVE-2026-80677

A flaw was found in the Linux kernel driver core. The devhassyncstate function reads the dev-driver pointer multiple times without proper synchronization. This allows a concurrent unbind operation to clear the dev-driver pointer between reads. Such a race condition could lead to a null pointer...

CVE-2026-70652

A flaw was found in libvips, an image processing library. When libvips is built with libultrahdr support, it can incorrectly size an output buffer during the process of enlarging an incoming JPEG to a very large output before encoding a gain map. This undersized allocation can lead to a heap buff...

CVE-2026-80603

A flaw was found in the Linux kernel's netfilter component, specifically within the nfconntrackirc module. An off-by-one error in the parsedcc function can cause the system to read one byte beyond an allocated buffer. This can lead to the use of uninitialized or stale data, potentially resulting ...

CVE-2026-80673

A flaw was found in the Linux kernel's NTFS file system driver. An attacker can craft a malicious on-disk attribute list that, when processed, causes an out-of-bounds read. This occurs because a look-ahead entry in the attribute list is not properly validated, allowing data to be read beyond the...

CVE-2026-80661

A flaw was found in the Linux kernel's Universal Flash Storage UFS core tracing module. The system attempts to access a memory location that has already been freed when processing trace events, specifically within the TPprintk function. This use-after-free vulnerability can be triggered when...

CVE-2026-70651

A flaw was found in libvips, an image processing library. When libvips is built without libtiff support but with ImageMagick support, an integer overflow can occur while loading a crafted multi-page Tagged Image File Format TIFF image. This overflow, caused by unchecked calculations of image fram...

CVE-2026-80612

A flaw was found in the Linux kernel's lightweight tunnel LWT encapsulation process. This vulnerability occurs when network packets carrying specific metadata are processed, causing the system to incorrectly overwrite or clear this metadata. Such an issue can lead to unexpected behavior or data...

CVE-2026-69242

A flaw was found in libvips. A crafted many-band TIFF image, when processed by libvips, can bypass scanline validation and trigger an integer overflow. This overflow leads to a heap buffer overflow, allowing an attacker to access arbitrary memory locations with negative offsets. This can result i...

CVE-2026-19913

A flaw was found in the Kaltura HTML5 player mwEmbed / html5lib. An unauthenticated, remote attacker can exploit improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter, used for backend requests, accepts non-HTTP schemes such as file://. When an exception or error...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

CVE-2026-80662

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. An incorrect definition of the CXLHEADERLOGSIZE led to an out-of-bounds read when processing RAS capability structures. This vulnerability allows a local attacker to read sensitive kernel stack memory, potentially leading ...

CVE-2026-80707

A flaw was found in the Linux kernel's J1939 CAN bus transport module. When a new session's receive buffer is allocated, it is not properly initialized, which can leave residual data from previous memory usage. A local attacker could potentially exploit this to read sensitive information from the...

CVE-2026-14671

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server. Mitigation To mitigate this vulnerability,...

CVE-2026-62243

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

CVE-2026-80591

A flaw was found in the f2fs file system within the Linux kernel. This vulnerability arises from inadequate validation of extended attribute xattr entries during the f2fslistxattr function's operation. A local attacker could potentially create a corrupted xattr entry, causing the system to attemp...

CVE-2026-79781

A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to read and overwrite sensitive files outside of their intended directory by manipulating S3 object keys with 'dot-dot' segments e.g., ../. This could lead to unauthorized access and modification of critical...

CVE-2026-79780

A flaw was found in rclone. The application fails to properly sanitize IBM IAM bearer tokens and Server-Side Encryption with Customer-Provided Keys SSE-C encryption keys during S3 redirect callbacks. This allows credentials to be preserved across scheme or host changes. A remote attacker observin...

CVE-2026-79779

A flaw was found in rclone. The application fails to reject transport downgrades during redirect handling, which allows Basic authorization and Cookie headers to be replayed over plaintext HTTP following HTTPS-to-HTTP redirects on the same host. An on-path attacker can observe this plaintext...

CVE-2026-72924

A flaw was found in GitHub CLI. The gh codespace ports forward command, by default, exposes forwarded services on all local network interfaces. This allows a network-adjacent attacker to access these services through the user's machine while port forwarding is active, even if the original...

CVE-2026-66908

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

CVE-2026-79776

A flaw was found in rclone. A remote attacker can bypass the authentication mechanism by accessing the /debug/pprof/cmdline endpoint. This vulnerability occurs because the pprof debug handler is mounted as its own router route, bypassing the main handler's authentication rule. Successful...

CVE-2026-63621

A flaw was found in Apache Camel Knative component. The Knative consumer in camel-knative improperly handles CloudEvent extension fields in structured content mode, copying them directly into message headers without proper filtering. This allows an unauthenticated attacker to inject internal Came...

CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security...

CVE-2026-16440

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

CVE-2026-82330

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82328

A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the usedclrs palette count parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue c...

CVE-2026-82327

A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that...

CVE-2026-82324

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-75143

A flaw was found in FFmpeg. A heap buffer overflow in the RIST protocol reader allows a remote attacker to trigger memory corruption by sending an oversized packet to an FFmpeg instance receiving a RIST stream. The libristread function ignores its buffer size argument, copying the full payload in...

CVE-2026-38345

A flaw was found in FFmpeg. A division-by-zero vulnerability in the ffswsinitsinglecontext function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-75144

A flaw was found in FFmpeg. Attackers can trigger memory corruption in the VC-2/Dirac RTP packetizer by supplying a specially crafted Dirac data unit. This heap buffer overflow occurs because the packetizer copies input data into a fixed-size buffer without proper size validation. This can lead t...

CVE-2026-75147

A flaw was found in FFmpeg's AV1 Real-time Transport Protocol RTP packetizer. A local attacker could entice a user to process a crafted AV1 input packet. This crafted packet could cause an out-of-bounds read, potentially leading to information disclosure or a denial of service DoS condition...

CVE-2026-75146

A flaw was found in FFmpeg. A malicious or misconfigured DASH Dynamic Adaptive Streaming over HTTP server can exploit an out-of-bounds read vulnerability in the DASH demuxer. This occurs when a live DASH manifest is refreshed with a startNumber that is lower than the previous value, causing a...

CVE-2026-75142

A flaw was found in FFmpeg. A stack buffer overflow exists in the MPEG-PS muxer. A local attacker or a user processing a specially crafted file with an excessive number of streams could trigger this flaw, leading to a buffer overflow. This could potentially result in denial of service or arbitrar...

CVE-2026-38350

A flaw was found in FFmpeg. An integer overflow vulnerability in the targetswsfuzzer function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the application becoming unresponsive or crashing, impacting its availability. Mitigatio...

CVE-2026-38348

A flaw was found in FFmpeg, specifically within the libswscale/utils.c component. An integer overflow vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This could lead to the application becoming unresponsive or crashing. Mitigati...

CVE-2026-38347

A flaw was found in FFmpeg. A heap overflow vulnerability exists in the ffswsalphablendaway function. This flaw allows attackers to cause a Denial of Service DoS by providing a specially crafted input. Successful exploitation could lead to the application becoming unresponsive or crashing...

CVE-2026-64833

A flaw was found in FFmpeg, specifically within the S/PDIF muxer. A remote attacker can exploit an out-of-bounds read vulnerability by providing a specially crafted DTS-HD audio stream during S/PDIF re-muxing. This allows the attacker to read memory beyond the intended buffer boundaries,...

CVE-2026-38343

A flaw was found in FFmpeg. An integer overflow in the libavfilter/vfscale.c component allows attackers to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is currently available...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2026-38346

A flaw was found in FFmpeg. An integer overflow vulnerability in the yuv2planeX8c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing, impacting system availability...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...