A heap out-of-bounds read vulnerability exists in AcademySoftwareFoundation's OpenEXR library versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12. The issue occurs in the TypedDeepImageChannel<T>::row() API when handling deep images with a non-zero dataWindow origin, causing row(0) to return a pointer outside the allocated sample list. This can lead to a crash and potential information disclosure under controlled heap conditions. The flaw is due to conflicting coordinate models used internally. Versions 3.3.13 and 3.4.13 contain fixes for this vulnerability.
CVE-2026-64203 is a high-severity memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. This affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions, including specific versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. There is no confirmed patch or official remediation available yet. The vulnerability involves an out-of-bounds read (CWE-125).
CVE-2026-64202 is a high-severity memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. The vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions, including specific versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. There is no confirmed patch or official remediation available at this time.
CVE-2026-64201 is a memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. The vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions, including specific versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. The CVSS score is 7.8, indicating a high severity level.
CVE-2026-16234 is a memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. The vulnerability affects NI LabVIEW versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. It has a high severity rating with a CVSS score of 7.8. No official patch or remediation guidance has been provided yet.
NVIDIA DGX Spark contains a vulnerability in its standalone MM firmware that allows an out-of-bounds read. Exploitation of this flaw could lead to information disclosure. The vulnerability has a medium severity rating with a CVSS score of 6. No specific affected versions or patches have been provided.
An out-of-bounds read vulnerability exists in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software. This flaw allows an attacker to cause a Denial of Service (DoS) by supplying a specially crafted CAN message. The vulnerability is identified as CWE-125 and has a CVSS 3.1 score of 7.1, indicating high severity. No affected versions or patch information are provided, and no known exploits are reported in the wild.
CVE-2026-16782 is an Out-of-Bounds Read vulnerability in Autodesk 3ds Max triggered by parsing a maliciously crafted SVG file. Exploitation can cause application crashes, leak sensitive data, or potentially allow arbitrary code execution within the process context. The vulnerability affects specific versions of 3ds Max from 2026 and 2027 releases. The CVSS score is 5.3, indicating medium severity.
CVE-2026-78475 is a vulnerability in the file-pix (ESM) plugin of GNOME GIMP that causes an out-of-bounds read due to unbounded stack allocation of a Variable-Length Array (VLA) when processing specially crafted PIX image files. This flaw can lead to denial of service through stack exhaustion and limited disclosure of stack memory contents. Exploitation requires user interaction by opening a malicious PIX file, which reduces the likelihood of attack. The vulnerability is rated medium severity with a CVSS score of 6.1.
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a value-less token is rejected. No in-product workarounds are available. As a stop-gap, an upstream reverse proxy or WAF that rejects or normalizes malformed `Cookie` headers (tokens lacking `=`) can reduce exposure, but upgrading is the recommended remediation.
An out-of-bounds read vulnerability exists in iccDEV versions prior to 2.3.2.1 due to a size_t underflow in the CIccEmbedIO::Read8() function. This occurs when parsing ICC profiles containing specific embedded profile tags. The issue is patched in version 2.3.2.1. No known workarounds are available.
CVE-2026-55894 is an out-of-bounds read vulnerability in the capstone disassembly framework affecting versions before 6.0.0-Alpha10. The flaw occurs in the SHDisassembler.c sh_disassemble() function where an index computed from a 16-bit instruction is not properly validated against the decode function-pointer table. This can lead to a segmentation fault and process termination when processing crafted bytecode with specific SH architecture modes. No code execution or information disclosure has been demonstrated. The issue is fixed in version 6.0.0-Alpha10.
CVE-2026-18716 is an out-of-bounds read vulnerability (CWE-125) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote authenticated attacker to access sensitive information or cause a denial of service. The vulnerability has a high severity rating with a CVSS score of 7.9. No specific patch or remediation details are provided in the available data.
CVE-2026-17423 is an out-of-bounds read vulnerability (CWE-125) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to obtain sensitive information and cause a denial of service. The vulnerability has a high severity with a CVSS score of 7.7. No patch or vendor advisory information is provided regarding remediation status.
CVE-2026-17124 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds read (CWE-125) that could allow a local attacker to execute arbitrary code without user interaction. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch information is provided in the source data.
CVE-2026-17007 is an out-of-bounds read vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to read sensitive information or cause a denial of service. The vulnerability does not require user interaction and affects confidentiality and availability. The CVSS score is 6.7, indicating a medium severity level.
CVE-2026-53587 is a high-severity vulnerability in libgit2 prior to versions 1.8.6 and 1.9.5. It involves improper input validation in the smart-protocol pkt-line capability buffer, leading to a heap out-of-bounds read that can crash clients during the first refs-advertisement packet over various Git protocols. The issue is fixed in libgit2 versions 1.8.6 and 1.9.5.
CVE-2026-63383 is a high-severity out-of-bounds read vulnerability in libevent, an event notification library. Versions prior to 2.1.13 and 2.2.2-alpha are affected. The flaw occurs in event_tagging.c when decode_tag_internal requests up to five bytes from evbuffer_pullup but iterates over the full logical buffer length, allowing a malformed six-byte tag in a fragmented evbuffer to trigger an out-of-bounds read. This can cause a process crash when decoding attacker-controlled tagged RPC data. The issue is fixed in libevent versions 2.1.13 and 2.2.2-alpha.
CVE-2026-76641 is an out-of-bounds read vulnerability in libexpat versions through 2.8.3. It arises from a struct size mismatch in ELEMENT_TYPE members, causing memory corruption when processing XML with external entity parsers. This can lead to failure in normalizing whitespace in non-CDATA attributes or a segmentation fault due to wild pointer dereference. The flaw was introduced by a previous fix for CVE-2026-66046.