psd-tools versions prior to 1.17.4 have a vulnerability in PSDImage.composite() and PSDImage.numpy() where output buffers are allocated based on attacker-controlled PSD header geometry without proper validation. This can lead to excessive memory allocation and potential denial of service due to out-of-memory conditions. The issue is fixed in version 1.17.4.
A heap-based buffer overflow vulnerability exists in the DHCPv6 and TFTP response builders of libslirp. This occurs when the host is configured with a small interface MTU and a guest supplies a DHCPv6 CLIENTID option or TFTP blksize option that overflows the reply buffer. The vulnerability can lead to denial of service and potentially arbitrary code execution in the host process. The default interface MTU configuration is not affected.
A pre-authentication global buffer overflow vulnerability has been identified in the ppp software affecting multiple specific Ubuntu package versions. This vulnerability could potentially allow an attacker to cause a denial of service or execute arbitrary code before authentication occurs.
CVE-2026-62846 is a medium severity vulnerability affecting multiple specific versions of the Squid3 proxy server software distributed in various Ubuntu releases. The vulnerability is identified by the internal tracking ID SQUID-2026:9. No detailed technical information or CVSS score is provided. There is no indication of known exploits in the wild or vendor-provided patch information in the available data.
CVE-2026-82373 is a medium severity vulnerability affecting multiple specific versions of the Znc IRC bouncer software. The exact nature and technical details of the vulnerability are not provided in the available data. There is no CVSS score or detailed description to clarify the impact or exploitation methods. No known exploits in the wild have been reported. The affected versions include a range of Znc releases from 1.0-5 through 1.10.2-1ubuntu3 and related builds. No patch or remediation information is available, so the current patch status is unknown.
CVE-2026-82374 is a vulnerability affecting multiple specific versions of the Znc IRC bouncer software. The exact nature and technical details of the vulnerability are unknown based on the provided information. The severity is assessed as medium. There is no information about available patches or vendor advisories, and no known exploits in the wild have been reported.
A null pointer dereference vulnerability exists in the pdf_open_filter function of the pdf-stream.c component in Artifex MuPDF up to commit b6d17493700c621c0e70036980a6ebd06d2202c9. This flaw can be triggered remotely and may cause a denial of service. Exploit code has been published. A patch identified by commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e is available to fix the issue.
A local security vulnerability exists in GNU Binutils 2.47 in the ELF Section Handler component, specifically in the elf_x86_64_common_section_index function. The issue causes a null pointer dereference, potentially leading to a denial of service. Public exploit code is available. Upgrading to version 2.48 addresses this vulnerability.
A vulnerability in GNU Binutils 2.47 affects the elf_x86_allocate_dynrelocs function in the Dynamic Relocation Allocation component, causing a null pointer dereference. The vulnerability requires local access to exploit. Public exploit code is available. Upgrading to version 2.48 resolves the issue.
A stack-based buffer overflow vulnerability exists in Samsung Opensource rLottie when rendering crafted vector animations. This flaw can lead to memory corruption. The vulnerability affects specific versions of rLottie as listed. The CVSS score is 4.4, indicating a medium severity level. There is no information provided about available patches or vendor advisories.
The Node.js module proxy-addr versions 1.1.0 through 2.0.7 improperly handle IPv4-mapped IPv6 trust subnets with an IPv4-sized prefix, causing them to trust all IPv4 addresses instead of the intended subnet. This allows unauthenticated clients to spoof the X-Forwarded-For header and control the client IP address seen by the application, undermining IP-based access controls, rate limiting, geolocation, and audit logging. The issue was introduced in version 1.1.0 and fixed in version 2.0.8. Users should upgrade to 2.0.8 or later or apply a workaround by correctly specifying the prefix length or using plain IPv4 notation for trust subnets.
A buffer overflow vulnerability exists in the elf_x86_64_relocate_section function of GNU Binutils 2.47's ld component. This vulnerability can be exploited locally by manipulating the argument roff. Public exploit code is available. Upgrading to version 2.48 resolves the issue.
A buffer overflow vulnerability exists in GNU Binutils 2.47 within the _bfd_elf_write_section_eh_frame function of the Eh Frame Section Handler component. This vulnerability arises from manipulation of specific arguments leading to memory corruption. Exploitation requires local access and user interaction. Public exploit code is available, but no official vendor response or patch has been confirmed yet. The vulnerability has a medium severity rating with a CVSS score of 6.1.
A heap-based buffer overflow vulnerability exists in GIMP's ICO file loader due to an integer overflow when processing ICO files with embedded PNG images. This flaw can lead to arbitrary code execution or application crashes if a malicious ICO file is opened.
A heap-based buffer overflow vulnerability exists in GIMP's PSP (Paint Shop Pro) file loader when processing compressed selection channels. This flaw arises from a mismatch between the allocated buffer size and the decompressed data size. An attacker can exploit this by crafting a malicious PSP file that, when opened in GIMP, may cause a crash or enable arbitrary code execution. The vulnerability affects multiple specific versions of GIMP. The CVSS score is 7.8, indicating a medium severity level.
A heap-based buffer overflow vulnerability exists in the ProcessGpsInfo function of the gpsinfo.c file in Matthias-Wandel jhead up to version 3.3. The flaw is triggered by manipulation of the TAG_GPS_LAT or TAG_GPS_LONG arguments. Exploitation requires local access. The vulnerability has been publicly disclosed, but no official response or patch has been provided by the project yet. The CVSS score is 5.3, indicating medium severity.
ZoneMinder versions prior to 1.36.39, 1.38.4, and 1.39.11 contain an authorization bypass vulnerability allowing authenticated low-privileged users with Events=View and/or Snapshots=View permissions to access private surveillance media from monitors they should not have access to. The user interface hides restricted monitors, but direct media requests using arbitrary event IDs bypass access controls, exposing private footage. The issue is fixed in versions 1.36.39, 1.38.4, and 1.39.11.
An integer overflow vulnerability in Orthanc DICOM Server's PNG decoding leads to a heap out-of-bounds write. This occurs due to incorrect pitch and buffer-size computation when processing attacker-supplied PNG images. The issue affects multiple specific versions of Orthanc DICOM Server. The vulnerability has a CVSS score of 8.1, indicating a high severity impact on integrity and availability, but no confidentiality impact. No known exploits are reported in the wild.
The Node.js compression middleware (compression) versions before 1.8.2 have a vulnerability where aborted client connections during compressed responses cause native zlib memory leaks. This can be exploited by a remote unauthenticated attacker to exhaust server memory and cause a crash. The issue is fixed in version 1.8.2, and users should upgrade to this or later versions.
The Node.js library multiparty, used for parsing multipart/form-data request bodies, contains a denial of service vulnerability in versions from 2.1.0 up to but not including 4.3.1. The parser does not limit the memory used when accumulating headers of a single multipart part, allowing an attacker to exhaust server memory by sending a request with very large header bytes. This vulnerability does not affect confidentiality or integrity. The issue is fixed in version 4.3.1 by capping the size of accumulated part headers.