libheif uncompressed tiled image encoding allows out-of-bounds write
CVE-2026-84444
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, he
2026-09-19 归档
今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
CVE-2026-84383
libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item
libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames
CVE-2026-84446
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list
libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)
CVE-2026-84448
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli
OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV
CVE-2026-65969
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
CVE-2026-67549
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
CVE-2026-63638
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
CVE-2026-63419
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`
CVE-2026-65970
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS
CVE-2026-63635
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`
CVE-2026-63420
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements
CVE-2026-59181
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow
CVE-2026-59156
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
CVE-2026-59956
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
PPPD buffer overflow in PEAP response code
CVE-2026-75883
The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up t
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
CVE-2025-53837
XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) int
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
CVE-2026-93688
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstra
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
CVE-2026-93687
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attack
ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
CVE-2026-16515
net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rul
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
CVE-2026-77929
ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c