Browse CVEs

MEDIUM 6.6 CVE-2026-41666 Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affecte… One 1.30.0+ Fix from $1,6002026-04-22 MEDIUM 6.6 CVE-2026-41667 Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Af… One 1.30.0+ Fix from $1,6002026-04-22 MEDIUM 5.3 CVE-2026-40448 Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Sourc… One 1.30.0+ Fix from $1,6002026-04-22 CRITICAL 9.8 CVE-2026-41144 F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to version 4.2.0, … Fprime Patch available Fix from $2,3002026-04-22 HIGH 7.5 CVE-2026-6773 Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. Firefox 150.0+ Fix from $1,9502026-04-21 MEDIUM 5.3 CVE-2026-6783 Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 1… Firefox 150.0+ Fix from $1,6002026-04-21 HIGH 7.1 CVE-2026-40244 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In v… Openexr 3.2.8 / 3.3.10+ Fix from $1,9502026-04-21 HIGH 7.1 CVE-2026-40250 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In v… Openexr 3.2.8 / 3.3.10+ Fix from $1,9502026-04-21 MEDIUM 5.3 CVE-2026-39886 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Vers… Openexr 3.4.10+ Fix from $1,6002026-04-21 HIGH 8.8 CVE-2026-41445 KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation si… Patch available Fix from $1,9502026-04-20 HIGH 7.5 CVE-2026-41254 Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. Little Cms after 2.18 Fix from $1,9502026-04-18 MEDIUM 6.5 CVE-2026-28214 Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize()… Firebird 3.0.14 / 4.0.7+ Fix from $1,6002026-04-17 CRITICAL 9.8 CVE-2026-40962 FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c. Ffmpeg 8.1+ Fix from $2,3002026-04-16 MEDIUM 6.5 CVE-2026-6385 A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a m… Mitigation only Fix from $1,6002026-04-15 HIGH 7.8 CVE-2026-40915 A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted… Enterprise Linux Mitigation only Fix from $1,9502026-04-15 HIGH 7.1 CVE-2026-33019 libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow leading to an out… Libsixel 1.8.7-r1+ Fix from $1,9502026-04-14 HIGH 7.1 CVE-2026-33020 libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a … Libsixel 1.8.7-r1+ Fix from $1,9502026-04-14 HIGH 8.8 CVE-2026-26178 Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9060 / 10.0.17763.8644+ Fix from $1,9502026-04-14 MEDIUM 5.5 CVE-2026-34238 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an inte… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,6002026-04-13 HIGH 7.5 CVE-2026-33900 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the vif… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,9502026-04-13 HIGH 7.5 CVE-2026-32316 jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_cop… Jq after 1.8.1 Fix from $1,9502026-04-13 HIGH 7.5 CVE-2026-40447 Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc50… Escargot Patch available Fix from $1,9502026-04-13 CRITICAL 9.8 CVE-2026-25208 Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71… Escargot Patch available Fix from $2,3002026-04-13 HIGH 7.1 CVE-2026-40385 In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or inform… Libexif after 0.6.25 Fix from $1,9502026-04-12 HIGH 7.8 CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Gimp Patch available Fix from $1,9502026-04-11 HIGH 7.8 CVE-2026-4150 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Gimp Patch available Fix from $1,9502026-04-11 HIGH 7.8 CVE-2026-4151 GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Gimp Patch available Fix from $1,9502026-04-11 MEDIUM 5.5 CVE-2026-31412 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_siz… Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,6002026-04-10 HIGH 7.5 CVE-2026-5477 An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags. The function wc_CmacUpdate used the gua… Wolfssl after 5.9.0 Fix from $1,9502026-04-10 HIGH 7.5 CVE-2026-40046 Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT contro… Mitigation only Fix from $1,9502026-04-09