libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2
CVE-2026-47251
libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) intro
#cwe-190
共收录 699 条相关情报。
← 返回所有主题libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contains an integer overflow. Both ...
CVE-2026-47714
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code i
libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation
CVE-2026-47714
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code i
Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153.
CVE-2026-16408
Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153.
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153.
CVE-2026-16395
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153.
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
CVE-2026-59199
### Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
CVE-2026-59197
### Summary Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd f
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode....
CVE-2026-41521
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing s
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation could incorrectly determine ...
CVE-2026-33328
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.1
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions l...
CVE-2026-33327
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and includ
xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
CVE-2026-41521
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing s
Possible integer overflow on 32-bit systems when reading GIF images
CVE-2026-33328
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.1
Possible integer overflow leading to potential heap-based buffer overflow
CVE-2026-33327
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and includ
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege atta...
CVE-2026-63091
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-r
ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser
CVE-2026-63091
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-r
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or coun...
CVE-2026-63940
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' E
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that...
CVE-2026-63889
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker co
NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially craft...
CVE-2026-55254
NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute...
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.