A vulnerability in the dcmdata library of OFFIS DCMTK 3.7.0 allows remote unauthenticated attackers to cause a denial of service via uncontrolled recursion when parsing deeply nested DICOM sequences. This affects DICOM services such as storescp, dcmrecv, and dcmqrscp, as well as local tools like dcmdump. The issue is fixed by adding a configurable sequence nesting depth limit.
A vulnerability in the OFFIS DCMTK bundled XML parser allows uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode(), leading to denial of service via stack exhaustion and process crash when processing crafted XML documents with deeply nested elements. This affects multiple specific versions of DCMTK. The issue is fixed in a later commit.
An uncontrolled recursion vulnerability exists in the DcmDicomDir::moveRecordToTree() function of OFFIS DCMTK 3.7.0 and certain earlier versions. This flaw allows an attacker to cause a denial of service by triggering stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records. Applications that open the DICOMDIR, including dcmgpdir and media viewers built on DCMTK, are affected. The issue has been fixed in a specific commit.
A vulnerability in flatpak-builder allows an attacker to cause information disclosure by tricking a user or CI system into processing a crafted build manifest. The flaw involves bypassing directory confinement checks via local file URIs in source download definitions, enabling sensitive host files accessible to the build process to be read and included in build artifacts. This issue affects multiple specific versions of flatpak-builder. The vulnerability has a medium severity rating with a CVSS score of 6.1.
A vulnerability in the PostgreSQL JDBC Driver (pgjdbc) versions 42.7.4 through 42.7.13 causes padding of values shorter than their declared length with leftover bytes from the driver's send buffer instead of zeros. These leftover bytes include SQL text and parameter values from previous statements on the same connection, potentially exposing sensitive data from other requests. This occurs when applications use certain methods to set data with declared lengths larger than the actual data. Versions 42.7.3 and earlier do not exhibit this behavior.
A vulnerability in pgjdbc, the PostgreSQL JDBC Driver versions 42.7.11 through 42.7.13, allows bypassing authentication restrictions when the requireAuth connection property excludes all known authentication methods. This misconfiguration causes the driver to accept any authentication method requested by the server, including cleartext password authentication, potentially exposing database passwords to an attacker positioned between the application and server. The issue is fixed in version 42.7.14, which rejects such connections with an error.
A vulnerability in pgjdbc, the PostgreSQL JDBC Driver versions 42.7.4 and 42.7.5, causes the driver to send previous contents of the GSS send buffer instead of the intended data when using GSS encryption modes 'prefer' or 'require'. This results in the server storing unintended bytes from prior messages, such as SQL statements and parameters, in place of the application's supplied values. Versions 42.7.3 and earlier are not affected, and the issue is fixed in version 42.7.6. Connections without GSS encryption or using the default 'allow' mode are not affected.
Coturn version 4.10.0 contains a vulnerability where remote unauthenticated attackers can leak stack memory contents by sending a TURN Allocate request without credentials. This occurs due to the stun_init_error_response_common_str() function failing to zero-initialize a buffer before using strlen() and copying leaked stack bytes into an error message. The vulnerability can expose pointer fragments that weaken address space layout randomization (ASLR) and enable precise version fingerprinting. The CVSS score is 5.3, indicating a medium severity level.
A heap-based buffer overflow vulnerability exists in GIMP's GIF export plug-in. This occurs when exporting images with very large dimensions, causing a 32-bit integer overflow during pixel buffer size calculation. The plug-in allocates a buffer based on the overflowed value, while the GEGL library writes using the actual image size, leading to a buffer overflow condition.
A heap use-after-free vulnerability exists in m17n-lib when processing specially crafted text input during input-method state transitions. This flaw can cause applications using the library to crash, resulting in a denial of service. Under certain conditions, it may also allow arbitrary code execution. The issue affects multiple specific versions of m17n-lib. The CVSS score is 6.2, indicating a medium severity level.
A vulnerability in m17n-lib allows an attacker to cause a denial of service by providing specially crafted or truncated UTF-8 input that triggers an unhandled null pointer dereference. This results in an unexpected application crash. The issue affects multiple specific versions of m17n-lib and has a medium severity rating.
A path traversal vulnerability in the EmailSheet extract_parts functionality of VisiData (commit 38b21f78) allows an attacker to write arbitrary files by providing a specially crafted .eml file. This vulnerability affects specific versions of VisiData and requires user interaction to trigger. The vulnerability has a medium severity rating with a CVSS score of 5.5.
A vulnerability in the Linux kernel's hugetlb memory management subsystem was resolved. The issue involved incorrect advancement of destination addresses during the mremap() operation when skipping page tables, which could lead to kernel panic on x86-64 systems. The flaw was fixed by ensuring the destination address advances by the same amount as the source address. Multiple specific Linux kernel versions are affected.
A use-after-free vulnerability in the Linux kernel's TCP implementation (tcp_send_synack) was resolved. The flaw involves a dangling pointer (retransmit_skb_hint) that can be manipulated by an unprivileged TCP Fast Open client using a crafted ICMP fragmentation-needed message, potentially causing kernel memory corruption. This issue affects specific Linux kernel versions used in various Ubuntu HWE edge releases.
A vulnerability in m17n-lib allows an attacker to cause a denial of service by providing crafted input with invalid UTF-8 sequences that trigger an infinite loop in text parsing. This results in sustained high CPU usage, impacting application availability. The issue affects multiple specific versions of m17n-lib. The CVSS score is 6.2, indicating a medium severity level.
A vulnerability in GIMP's X cursor (XMC) thumbnail loader allows an out-of-bounds heap read due to integer overflow in size calculation when processing crafted XMC files. This can cause GIMP to crash or corrupt process memory. The issue affects multiple specific versions of GIMP. The CVSS score is 5.5, indicating medium severity.
A vulnerability in sssd-kcm allows a local user or process with access to the sssd-kcm UNIX socket to cause a denial of service by sending a large request length header and stalling the connection, leading to memory exhaustion. This flaw affects multiple specific versions of sssd. The issue results in a medium severity denial of service without impacting confidentiality or integrity.
CVE-2026-93515 is a use-after-free vulnerability in the Present Extension of the Xorg server. This flaw involves cross-window notification handling that may lead to memory corruption. The vulnerability affects multiple specific Ubuntu package versions of xorg-server. No CVSS score or detailed technical exploitation information is provided. The severity is assessed as medium based on the described impact.
A heap buffer overflow vulnerability exists in the GLX RenderLarge component of the Xorg server. This vulnerability affects multiple specific versions of the xorg-server package. The issue is classified with medium severity. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild and no vendor patch or remediation details are included in the provided data.
CVE-2026-93518 is a medium severity vulnerability in the Xorg server related to numeric truncation in the XKB ResizeKeyType functionality. It affects multiple specific Ubuntu package versions of the xorg-server. No CVSS score or detailed technical impact is provided. There is no information on available patches or exploits in the wild.