Incorrect boundary conditions in the Audio/Video: Web Codecs component

No description published yet

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Information disclosure due to incorrect boundary conditions in the Audio/Video component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

Pillow is vulnerable to a FITS GZIP decompression bomb

ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()

ImageMagick has a Heap Buffer Overflow via MVG decoder

FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Gstreamer: incomplete fix of cve-2026-1940

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Qemu-kvm: vnc websocket handshake use-after-free

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: --safe-links option bypass leads to path traversal

Libtiff: null pointer dereference in tif_dirinfo.c

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Poppler: pdfinfo: crash in broken documents when using -dests parameter

Ca: token authentication bypass vulnerability

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Libdwarf: crashes randomly on fuzzed object

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Squid: denial of service in http digest authentication