barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computati...

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe

历史摘要 · 未重新核验 · NVD

libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a contr...

CVE-2026-42046

libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas

历史摘要 · 未重新核验 · NVD

jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX-1 (2147483646) digits, the D2U() macro overflows during ...

CVE-2026-43894

jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX

历史摘要 · 未重新核验 · NVD

jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond ≈1 GiB (via de...

CVE-2026-41257

jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in

历史摘要 · 未重新核验 · NVD

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a signed int var...

CVE-2026-7568

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() f

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a cra...

CVE-2026-42311

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could

历史摘要 · 未重新核验 · NVD

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it ...

CVE-2026-42308

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amo

历史摘要 · 未重新核验 · NVD

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary...

CVE-2026-6664

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to

历史摘要 · 未重新核验 · GitHub Advisory

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgB...

CVE-2026-6664

CVE-2026-6664 是 PgBouncer 连接池组件中的一个整数溢出漏洞，影响版本 1.25.2 之前的所有版本。该漏洞存在于网络数据包解析代码中，由于整数溢出绕过了边界检查，导致堆内存破坏，攻击者无需身份认证即可通过发送特制的

历史摘要 · 未重新核验 · NVD

smallbitvec: Integer overflow in safe API leads to heap buffer overflow

CVE-2026-44983

### Summary An integer overflow in the internal capacity calculation of `smallbitvec` can lead to an undersized heap all

历史摘要 · 未重新核验 · GitHub Advisory

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file...

CVE-2026-45130

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compou

历史摘要 · 未重新核验 · NVD

Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s l...

CVE-2026-42199

Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand

历史摘要 · 未重新核验 · NVD

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3....

CVE-2026-42217

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

历史摘要 · 未重新核验 · NVD

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3....

CVE-2026-41142

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

历史摘要 · 未重新核验 · NVD

imageproc: integer overflow in kernel size check leads to out-of-bounds read

A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total siz

历史摘要 · 未重新核验 · GitHub Advisory

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This

历史摘要 · 未重新核验 · GitHub Advisory

imageproc has fragile bounds check when sampling from image

A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by a

历史摘要 · 未重新核验 · GitHub Advisory

kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input

### Summary The `POST /v1/domain/_image` and `POST /v1/oauth2/{rs_name}/_image` handlers call `validate_image()` on the

历史摘要 · 未重新核验 · GitHub Advisory

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

CVE-2026-42311

### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

Pillow has an integer overflow when processing fonts

CVE-2026-42308

If a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may

历史摘要 · 未重新核验 · GitHub Advisory