Threats affecting pkg:generic/htmlunit

gbsplay version 0.0.103 contains an out-of-bounds read vulnerability in the mapper_map() function within mapper.c. This flaw occurs because the function does not properly reject ROM bank indexes that exceed the ROM size, leading to an underflowed bank length. Crafted .gbr, .gbs, or .gb files with malicious bank indexes can cause the bank_get() function to read beyond the allocated heap ROM buffer, resulting in a crash of the player application.

FLTK versions through 1.4.5 have an integer overflow vulnerability in the Fl_BMP_Image::load_bmp_() function. This flaw causes an undersized pixel buffer allocation based on file-supplied width and height values. An attacker can craft a BMP or ICO file with large dimensions that triggers a heap buffer overflow during row decoding, leading to heap corruption.

gbsplay version 0.0.103 has a heap out-of-bounds read vulnerability in the vgm_open() function within gbs.c. This flaw occurs because the function processes the VGM command stream without proper bounds checking. An attacker can exploit this by providing a specially crafted VGM file containing wait opcodes but lacking the required 0x66 terminator, causing the player to read beyond the allocated heap buffer and potentially crash.

Gbsplay versions up to 0.0.103 have a heap out-of-bounds read vulnerability in the gbr_open() function within gbs.c. This flaw occurs because the function does not verify the file length before scanning the GBR ROM title field, allowing crafted GBR files between 0x21 and 0x162 bytes to cause out-of-bounds reads. Exploitation can lead to application crashes or memory leakage.

A heap out-of-bounds read vulnerability exists in libfvde versions through 20260923. The flaw occurs in the function libfvde_encrypted_metadata_read_type_0x0024() due to missing bounds checking on xml_plist_data_size against the source metadata block. This can lead to a crash when processing a specially crafted FileVault 2 Core Storage volume.

Furnace versions up to 0.6.8.3 have an out-of-bounds heap read vulnerability in the DivEngine::loadFTM() function. This flaw occurs when importing FamiTracker modules with a crafted instrument note count exceeding 120, causing the application to read beyond the noteMap array and crash. The vulnerability affects .ftm, .dnm, and 0CC/E-FamiTracker module files.

FLTK versions through 1.4.5 have a stack-based buffer overflow vulnerability in the Fl_BMP_Image::load_bmp_() function. This flaw occurs when an attacker supplies a BMP or ICO file with a colors_used field value exceeding 256, overflowing a 768-byte colormap array. The vulnerability can lead to application crashes or potentially allow code execution.

A cross-site scripting (XSS) vulnerability exists in itsourcecode Airline Reservation System 1.0 in the /book_flight.php file. The flaw arises from improper handling of the 'max' argument, allowing remote attackers to execute script code. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 4.3.

A SQL injection vulnerability exists in itsourcecode Online Book Store 1.0 in the /book.php file via the bookisbn parameter. This vulnerability allows remote attackers with low privileges to execute unauthorized SQL commands. The flaw has been publicly disclosed and may be exploited. The CVSS score is 6.3, indicating medium severity.

A critical stack-based buffer overflow vulnerability exists in the TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104, specifically in the sub_402340 function of the infostat.cgi Device-Information CGI component. The flaw can be remotely exploited by manipulating the CONTENT_LENGTH argument, potentially leading to complete system compromise. Public exploit code is available, increasing the risk of attacks.

CVE-2026-116836 is a Stored Cross-Site Scripting (XSS) vulnerability in Ubiquiti Inc airMAX M devices that can be exploited by an attacker with access to the adjacent network. Successful exploitation could allow privilege escalation on the affected device. The vulnerability affects airMAX M versions prior to 6.3.26. A fix is available in version 6.3.26.

CVE-2026-116620 is a medium severity vulnerability in Tencent RapidJSON versions 1.0 and 1.1.0. It involves an out-of-bounds read in the GenericStringStream<UTF8<char>>::Take function within the Regex Parser component. This flaw can be triggered remotely and has been publicly disclosed. No patch or vendor response is currently available.

CVE-2026-116608 is a medium severity vulnerability in DAMO Academy VideoLLaMA2 versions 1.0 and 1.1. It involves improper validation of an integrity check value in the load_pretrained_model function, which can be triggered by manipulating the _name_or_path argument. Remote exploitation is possible, and public exploit details have been disclosed. The vendor has not yet responded or issued a fix.

CVE-2026-116605 is a vulnerability in SourceCodester Online Food Ordering System version 1.0. It involves client-side enforcement of security controls that should be enforced server-side in the order.php file, specifically through manipulation of the price/title argument. The vulnerability can be exploited remotely and public exploit code is available. The CVSS 4.0 score is 6.9, indicating a medium severity level.

CVE-2026-106427 is a vulnerability in Chromium involving a confused deputy issue on mobile platforms. A fix for this vulnerability is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106419 is a use-after-free vulnerability in the ANGLE component of Chromium. This flaw affects Chromium versions prior to 155.0.4283.48 and was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. There are no known exploits in the wild at this time.

CVE-2026-106414 is a vulnerability in Chromium related to improper input validation in the mobile context. Affected versions are up to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106408 is a vulnerability in Chromium related to a protection mechanism failure on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106406 is a vulnerability in Chromium related to missing authorization in the mobile context. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106405 is a race condition vulnerability in the CustomTabs component of Chromium. Affected versions are those before 155.0.4283.48, with the issue fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.