CVE-2026-47314 is an out-of-bounds write vulnerability in Samsung Open Source Escargot that can cause buffer overflow conditions. It affects a specific version of Escargot identified by the commit hash 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl contain a critical out-of-bounds write vulnerability triggered when parsing a specially crafted PKCS12 file with a large OCTET STRING or BIT STRING attribute. This flaw arises from a signed integer overflow during size calculation, potentially allowing remote code execution. The vulnerability has a CVSS score of 9.8, indicating critical severity. A patch is available, and since this is a cloud service, the vendor typically manages remediation server-side. No known exploits are reported in the wild at this time.
CVE-2026-8669 is a medium severity heap out-of-bounds write vulnerability in the TONYC Imager Perl module (versions through 1.030). It occurs when processing crafted multi-frame GIF files due to improper bounds checking in the GIF parsing code, specifically in the handling of per-row buffers for image frames. This flaw can lead to memory corruption but does not have confirmed exploits in the wild. No official patch or remediation guidance is currently available.
CVE-2026-8454 is a medium severity vulnerability in the TONYC Imager::File::GIF Perl module versions through 1.002. It involves a heap out-of-bounds write triggered by crafted multi-frame GIF files due to improper bounds checking in the DGifGetLine function call within the image parsing logic. This flaw can potentially lead to memory corruption. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.
Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54517 is a high-severity vulnerability in the AMD Instinct™ MI250 GPU involving an out-of-bounds write in the AMDGV_CMD_GET_DIAG_DATA ioctl handler. This flaw could allow a local user with limited privileges to escalate their privileges potentially via remote code execution. The vulnerability is classified under CWE-787 (Out-of-bounds Write) and has a CVSS 4.0 base score of 8.5, indicating significant impact. No official patch or remediation guidance has been provided by AMD as of the published date. There are no known exploits in the wild at this time. Users should monitor AMD advisories for updates on fixes or mitigations.
CVE-2025-29935 is a high-severity vulnerability involving an out-of-bounds write in the AMD Platform Management Framework (PMF) on AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (Rembrandt R). This flaw could allow an attacker with limited privileges to execute arbitrary code at an elevated privilege level, potentially impacting confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS 4.0 base score of 8.4, indicating significant risk. As of the published date, no official patch or remediation guidance has been provided by AMD. There are no known exploits in the wild at this time.
CVE-2025-52540 is a high-severity vulnerability in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, caused by improper input validation in the AMD Platform Management Framework (PMF) Driver. This flaw allows a local attacker to perform an out-of-bounds write, which can potentially lead to privilege escalation on affected systems. The vulnerability has a CVSS 4.0 base score of 8.5, indicating significant impact if exploited. No official patch or remediation guidance has been provided by AMD as of the published date. There are no known exploits in the wild currently. Users should monitor AMD advisories for updates on mitigation or patches.
CVE-2025-48519 is a high-severity vulnerability in the AMD Platform Management Framework (PMF) driver for AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics. It involves improper input validation that allows a local attacker to perform out-of-bounds read or write operations. This can potentially lead to privilege escalation on affected systems. The vulnerability is classified under CWE-787 (Out-of-bounds Write). No official patch or remediation guidance is currently available from AMD. There are no known exploits in the wild at this time.
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a signed integer overflow in the SIXEL parser's image-buffer doubling loop can lead to an out-of-bounds heap write in sixel_decode_raw_impl. context->pos_x grows by repeat_count on every sixel character with no upper bound check. Once pos_x approaches INT_MAX, the expression "pos_x + repeat_count" used to size the image buffer overflows signed int. Depending on how the overflow wraps, the resize check that should reject oversized buffers can be bypassed, after which a subsequent write computes a large attacker-influenced offset into image->data and writes past the allocation. Reachable from any caller that decodes attacker-supplied SIXEL data, including img2sixel. This vulnerability is fixed in 1.8.7-r2.
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, sgiinput.cpp:265,274 use OIIO_DASSERT for bounds checking in the RLE decode loop. In release builds, OIIO_DASSERT compiles to ((void)sizeof(x)) (dassert.h:210), making all bounds checks no-ops. A crafted .sgi file with RLE count exceeding scanline width causes heap buffer overflow and crash. This vulnerability is fixed in 3.0.18.0 and 3.1.13.0.
CVE-2026-43904 is a high-severity out-of-bounds write vulnerability in AcademySoftwareFoundation's OpenImageIO prior to versions 3.0.18.0 and 3.1.13.0. The issue occurs in the RLE decoding paths of softimageinput.cpp, where run lengths are not properly clamped to the remaining scanline width, leading to a heap overflow of up to 65535 bytes when processing a crafted . pic image file.
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer overflow in QueryRGBBufferSizeInternal() in DPXColorConverter.cpp leads to a heap-based out-of-bounds write when processing crafted DPX image files. The function computes buffer sizes using 32-bit signed integer arithmetic with negative multipliers (e.g., pixels * -3 * bytes for kCbYCr descriptors and pixels * -4 * bytes for kABGR descriptors), where a negative result is used as an in-band signal that no separate buffer is needed. When the pixel count is sufficiently large, the multiplication overflows INT_MIN and wraps to a small positive value. The caller in dpxinput.cpp interprets this positive value as a required buffer size, allocates an undersized heap buffer via m_decodebuf.resize(), and then writes the full image data into it via fread, resulting in a heap buffer overflow. An attacker can exploit this by crafting a DPX file that triggers the overflow, causing a denial of service (crash) or potentially arbitrary code execution through heap corruption in any application that reads pixel data using OpenImageIO. This vulnerability is fixed in 3.0.18.0 and 3.1.13.0.
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the pixel-loop index expression i * 3 inside ConvertCbYCrYToRGB() causes the function to compute a large negative pointer offset into the output buffer, producing an out-of-bounds write that crashes the process. This vulnerability is fixed in 3.0.18.0 and 3.1.13.0.
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the loop index expression i * 4 inside SwapRGBABytes() causes the function to compute a large negative pointer offset when processing kABGR DPX images with large dimensions. The immediate crash is an out-of-bounds read (the memcpy at line 45 reads from &input[i * 4] first), but the subsequent write operations at lines 46–49 target the same wrapped offset — making this a combined OOB read+write primitive. This vulnerability is fixed in 3.0.18.0 and 3.1.13.0.
CVE-2026-0250 is a medium severity buffer overflow vulnerability in the Palo Alto Networks GlobalProtect app versions 6.2.0 and 6.3.0 (excluding iOS). It allows a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges during the processing of Portal and Gateway communications. There is no known exploit in the wild and no official patch or remediation guidance currently available.
CVE-2026-0263 is a buffer overflow vulnerability in the IKEv2 processing component of Palo Alto Networks PAN-OS software. This flaw allows an unauthenticated network attacker to execute arbitrary code with elevated privileges on the affected firewall or cause a denial of service. The vulnerability specifically impacts PAN-OS running on Cloud NGFW devices, while Panorama, Cloud NGFW as a service, and Prisma Access are not affected. The CVSS 4.0 base score is 7.2, indicating a high severity. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.
CVE-2026-21018 is an out-of-bounds write vulnerability in the SveService component of Samsung Mobile Devices prior to the SMR May-2026 Release 1. This flaw allows local attackers with privileged access to execute arbitrary code. The vulnerability has a CVSS 4.0 base score of 6.8, indicating a medium severity level. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.
CVE-2026-8053 is a high-severity vulnerability in MongoDB Server's time-series collection implementation. It allows an authenticated user with database write privileges to cause an out-of-bounds memory write in the mongod process due to an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. This flaw can lead to arbitrary code execution under certain conditions. The vulnerability affects multiple MongoDB Server versions prior to 5.0.33, 6.0.28, 7.0.34, 8.
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.