Threat database

hw/display/virtio-gpu: validate stride against width on scanout

libvhost-user: fix heap overflow in vu_check_queue_inflights

virtio-net: fix short frame OOB read in receive_filter()

virtio-net: fix OOB read in RSC receive path

hw/display/qxl: unregister vm_change_state handler and BHs

virtio-pmem: wait for flush requests on unrealize

dmg: reject inconsistent UDRW chunk sector count and length

dmg: fix out-of-bounds load in search_chunk()

hw/net/virtio-net: Protect from DMA re-entrancy bugs

A security update addresses a medium severity vulnerability identified as CVE-2026-81493 affecting multiple specific versions of the Incus product. The update mitigates the vulnerability in these versions, which span from 0.4-1ubuntu1 through 7.0.1-5. No CVSS score is available for this vulnerability. There are no known exploits in the wild at this time.

CVE-2026-81494 is a medium severity vulnerability in the Incus software that allows arbitrary file write on the host system via image-planted symbolic links and newline injection in oci.dns. This vulnerability affects multiple specific versions of Incus. There is no CVSS score provided, and no known exploits in the wild have been reported. No patch or remediation information is available in the provided data.

A medium severity security vulnerability identified as CVE-2026-81495 affects multiple specific versions of the Incus product. The details provided are limited to a security update notification without technical specifics or exploit information. No CVSS score is available for this vulnerability.

A medium severity security vulnerability identified as CVE-2026-81496 affects multiple specific versions of the Incus software. The details provided are limited to a security update notice without further technical specifics or exploitation information.

A medium severity security vulnerability identified as CVE-2026-81497 affects multiple specific versions of the Incus software. A security update has been issued to address this vulnerability. No detailed technical information or CVSS score is provided. There are no known exploits in the wild at this time.

CVE-2026-81498 is a medium severity security vulnerability affecting multiple specific versions of the Incus product. A security update has been issued to address this vulnerability. No CVSS score or detailed technical information is provided. There are no known exploits in the wild at this time.

CVE-2026-81499 is a medium severity vulnerability in the Incus project that allows bypassing project restrictions on network address sets. This could potentially allow unauthorized access or manipulation of network address configurations within affected versions of Incus. No CVSS score is provided, and there is no information about active exploitation or available patches.

CVE-2026-81500 is a medium severity vulnerability affecting multiple specific versions of the Incus product. The exact nature and technical details of the vulnerability are not provided. There is no CVSS score or detailed description available, and no known exploits are reported in the wild. The affected versions include a range of releases from 0.4-1ubuntu1 through 7.0.1-5, including various Ubuntu-specific builds. No patch or remediation information is provided.

CVE-2026-81501 is a medium severity vulnerability affecting multiple specific versions of the Incus product. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available, and no known exploits in the wild have been reported. The affected versions include various releases from 0.4-1ubuntu1 through 7.0.1-5, as explicitly listed. No patch or remediation information is provided, so the patch status is not confirmed.

A vulnerability in the file-iff (IFF/ILBM) plugin of GIMP allows heap out-of-bounds reads due to improper validation of HAM row size and handling of zero color planes. This flaw can cause application crashes leading to denial of service or limited disclosure of heap memory contents. The issue affects multiple specific versions of GIMP as listed. The CVSS score is 6.1, indicating a medium severity level.

A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that they fall within the expected range. A corrupted or specially crafted .solv cache file (for example, one left in a torn state after an unclean system shutdown) can cause an out-of-bounds memory write when a tool such as dnf, yum, or zypper next processes it. Successful exploitation is expected to result in a crash of the affected tool (denial of service); it is not expected to allow arbitrary code execution because the out-of-bounds write always stores a fixed, non-attacker-controlled value.