CWE-787: Out-of-bounds Write vulnerabilities

CVE-2026-77118 is a heap out-of-bounds write vulnerability in the Photo CD (PCD) decoder of GraphicsMagick. The flaw occurs in the DecodeImage() function where the output pointer advances without proper boundary checks, potentially leading to heap memory corruption when processing crafted PCD files. This affects GraphicsMagick versions from 0 up to but not including 1.3.48. The vulnerability has a high severity score of 8.4 CVSS v4.0.

CVE-2026-76920 is an out-of-bounds write vulnerability in the 3gpp phone log file parser of Wireshark versions 4.4.0 to 4.4.17 and 4.6.0 to 4.6.7. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 4.7.

CVE-2026-76880 is a high-severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. It is an out-of-bounds write flaw in the RRC protocol dissector that can cause the application to crash, resulting in denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild. Patch status is not confirmed from the provided data.

CVE-2026-16914 is an out-of-bounds write vulnerability in IBM AIX versions 7.2, 7.3, and IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no vendor patch information is provided in the input data.

CVE-2026-16913 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction.

CVE-2026-16903 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to execute arbitrary code or cause a denial of service. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. No information about available patches or vendor advisories is provided.

CVE-2026-16901 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges.

CVE-2026-16894 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction.

CVE-2026-16886 is a medium severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write that could be triggered remotely, potentially causing a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-16873 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write that could allow a local attacker to escalate privileges on the affected systems.

CVE-2026-18821 is a high-severity vulnerability in IBM PowerVM Hypervisor firmware affecting partitions during network boot. An unauthenticated attacker on the same network can send a malformed packet to a partition undergoing network boot, leading to arbitrary code execution within that partition's firmware. This compromises the confidentiality, integrity, and availability of the affected partition and everything it subsequently loads. Other partitions and the managed system remain unaffected. The vulnerability is related to an out-of-bounds write (CWE-787) in the partition firmware.

CVE-2026-16864 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without requiring privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-16862 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction.

CVE-2026-16855 is a vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving a heap buffer overflow that can be triggered by a local attacker. This flaw could lead to a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No information about available patches or exploits in the wild is provided.

CVE-2026-16847 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges.

CVE-2026-16845 is a critical heap buffer overflow vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability is identified as CWE-787 (Out-of-bounds Write) and has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-16841 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability is classified as an out-of-bounds write (CWE-787).

CVE-2026-16840 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving an out-of-bounds write that could allow a remote attacker to execute arbitrary code without any privileges or user interaction.

CVE-2026-16825 is an out-of-bounds write vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service. The vulnerability has a medium severity rating with a CVSS score of 4.2. No patch or remediation information is provided in the available data.

CVE-2026-17100 is a high-severity out-of-bounds write vulnerability in IBM Power Systems Firmware affecting multiple firmware versions. It allows an attacker with authenticated service-level access to the BMC/FSP service processor mailbox interface to execute arbitrary code in the host firmware runtime. This leads to full control over the managed system, impacting confidentiality, integrity, and availability.