Search: 18.8.3.2

FreeRDP versions from 2.0.0 up to but not including 3.32.0 contain a heap out-of-bounds vulnerability. This flaw can lead to high impact on integrity and availability without requiring privileges or user interaction. The vulnerability is rated high severity with a CVSS score of 7.4.

A heap-based buffer overflow vulnerability exists in parted when processing specially crafted FAT32 filesystem images due to an integer calculation error during buffer allocation. A local attacker could exploit this by tricking a user or automated service into opening a malicious filesystem image, potentially causing an application crash (Denial of Service) or memory corruption.

A critical use-after-free vulnerability exists in Text::CSV_XS Perl module versions from 1.46 up to but not including 1.65. This flaw allows remote attackers to cause a complete compromise of confidentiality, integrity, and availability without requiring user interaction or privileges.

A vulnerability was found in libarchive version 3.1.2 with various Ubuntu package builds. The flaw allows an attacker to cause a denial of service. The CVSS score is low, indicating limited impact primarily affecting availability with no confidentiality or integrity impact.

A high-severity vulnerability (CVE-2026-68498) affects jackson-core versions including 2.4.2-2, 2.8.6-1, 2.9.1-1, and others up to 2.14.1-2. The issue relates to the StreamReadConstraints.maxNameLength parameter, which has a default maximum length of 50,000 characters. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network exploitable flaw with low attack complexity and no required privileges or user interaction, causing availability impact. No public exploits or patches are currently documented.

A vulnerability in GIMP allows an attacker to cause a Denial of Service (DoS) via a specific flaw. The issue affects multiple versions of GIMP as listed. The CVSS score is 6.1, indicating a medium severity impact primarily due to availability disruption. No public exploits or known active exploitation have been reported. The vulnerability requires local access with low attack complexity and user interaction.

CVE-2026-62439 is an integer overflow vulnerability in the GIMP file-pvr plug-in used in Red Hat Enterprise Linux 10. The flaw occurs when calculating memory buffer sizes for image dimensions in PowerVR (.pvr) files, leading to a heap-based buffer overflow. Exploitation requires a user to open or preview a specially crafted .pvr file, potentially causing arbitrary code execution or application crash (Denial of Service).

A vulnerability has been identified in libtirpc affecting multiple specific versions. The flaw allows a remote attacker to cause a denial of service (availability impact) but does not affect confidentiality or integrity. The vulnerability requires high attack complexity and user interaction, with no privileges needed. The issue has a medium severity rating with a CVSS score of 5.3.

A vulnerability in libtirpc allows an authenticated remote attacker to cause a denial of service by impacting availability. The flaw affects multiple specific versions of libtirpc, including various Ubuntu package versions. The issue has a medium severity rating with a CVSS score of 6.5. No public exploit code or known exploitation in the wild has been reported. No patch or remediation details are provided in the available data.

GPAC MP4Box version 2.4 and several related versions contain a floating point exception vulnerability. This flaw can cause a denial of service by crashing the application when processing crafted input. The vulnerability has a medium severity rating with a CVSS score of 5.5. No public exploits or active exploitation in the wild have been reported. The affected versions include multiple specific builds primarily around version 0.5.2 and 2.2.1 as well as some others listed explicitly.

Antiword versions up to 0.37 contain a stack out-of-bounds read vulnerability that can lead to a denial of service condition. The vulnerability has a low severity score and requires local access with user interaction to exploit.

Antiword versions up to 0.37 contain a heap out-of-bounds read vulnerability that can cause a denial of service. This flaw has a medium severity rating and does not impact confidentiality or integrity but affects availability. The vulnerability requires local access and user interaction to exploit.

CVE-2026-97380 is a high-severity vulnerability affecting specific versions of MariaDB 10.0 and 10.1 as packaged in various Ubuntu releases. MariaDB is a community-developed fork of MySQL server. The vulnerability has a CVSS 3.1 score of 8.8, indicating network exploitable with low attack complexity and no user interaction required, leading to high impact on confidentiality, integrity, and availability.

MariaDB server versions from 10.6.1 up to but not including 10.6.28, and specific later versions including 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, contain a vulnerability involving the #mysql50# prefix. This prefix bypasses normal table-name filesystem encoding, allowing attackers to access files using legacy unencoded names. Exploitation can lead to crashes, data corruption, data exfiltration, or remote code execution. The issue is fixed in the specified versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVE-2026-86047 is a high-severity vulnerability affecting specific versions of MariaDB 10.0 and 10.1 as packaged in various Ubuntu releases. The flaw impacts the integrity and availability of the database server but does not affect confidentiality. It requires network access with high attack complexity and low privileges, and user interaction is needed. The vulnerability has been publicly disclosed but no known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-85985 is a medium severity vulnerability affecting specific versions of MariaDB server 10.0 and 10.1 as packaged in various Ubuntu releases. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with low complexity, requiring privileges, no user interaction, and impacts confidentiality and integrity but not availability. The affected versions include multiple Ubuntu-specific builds of MariaDB 10.0.20 through 10.0.38 and 10.1.25 through 10.1.40. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the data.

CVE-2026-85748 is a critical vulnerability affecting specific versions of MariaDB 10.0 and 10.1, community-developed forks of MySQL server. The flaw has a very high CVSS score of 9.9, indicating network exploitable with low attack complexity and no user interaction required. It impacts confidentiality, integrity, and availability with a scope change. The affected versions include multiple Ubuntu package builds of MariaDB 10.0 and 10.1. No public exploit or vendor patch information is provided in the data.

CVE-2026-85746 is a critical vulnerability affecting multiple specific versions of MariaDB 10.0 and 10.1, a community-developed fork of MySQL server. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. It requires network access with low privileges and no user interaction, and it affects multiple Ubuntu package versions. No public exploits or vendor patch information are provided in the data.

CVE-2026-85745 is a medium severity vulnerability affecting specific versions of MariaDB 10.0 and 10.1 as packaged in various Ubuntu releases. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a low impact on confidentiality with no impact on integrity or availability. It requires network access with low privileges and does not require user interaction. No public exploits or known active exploitation have been reported. The vulnerability affects multiple Ubuntu-specific MariaDB package versions from 10.0.20 through 10.1.40.