https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T17:59:49.318081+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5306 ALSA-2024:5306 — Moderate: orc security update 2026-10-08T17:59:49.333393+00:00

Affected: AlmaLinux:8: orc, AlmaLinux:8: orc-compiler, AlmaLinux:8: orc-devel

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

* orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06669 bdu:2024-06669 2026-10-08T17:59:49.333458+00:00 bdu:2024-06669 https://cve.radiocsirt.org/vuln/euvd-2026-217459 EUVD-2026-217459 2026-10-08T17:59:49.333474+00:00 EUVD-2026-217459 https://cve.radiocsirt.org/vuln/fkie_cve-2024-40897 fkie_cve-2024-40897 2026-10-08T17:59:49.333486+00:00

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

 https://cve.radiocsirt.org/vuln/ghsa-247v-6wr5-3wf3 GHSA-247v-6wr5-3wf3 2026-10-08T17:59:49.333509+00:00

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000075 jvndb-2024-000075 2026-10-08T17:59:49.333524+00:00

ORC provided by GStreamer is typically used when developing GStreamer plugins. Stack-based buffer overflow vulnerability (CWE-121) exists in orcparse.c of ORC. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-40897 msrc_CVE-2024-40897 — Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is trick… 2026-10-08T17:59:49.333541+00:00 msrc_CVE-2024-40897 https://cve.radiocsirt.org/vuln/oesa-2024-1975 OESA-2024-1975 — orc security update 2026-10-08T17:59:49.333558+00:00

Affected: openEuler:24.03-LTS: orc, openEuler:22.03-LTS-SP4: orc, openEuler:22.03-LTS-SP3: orc, openEuler:20.03-LTS-SP4: orc, openEuler:22.03-LTS-SP1: orc

Orc is the sucessor to Liboil - The Library of Optimized Inner Loops. Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.(CVE-2024-40897)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14216-1 openSUSE-SU-2024:14216-1 — liborc-0_4-0-0.4.39-1.1 on GA media 2026-10-08T17:59:49.333589+00:00

liborc-0_4-0-0.4.39-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:5629 RHSA-2024:5629 — Red Hat Security Advisory: orc security update 2026-10-08T17:59:49.333605+00:00

orc: Stack-based buffer overflow vulnerability in ORC

 https://cve.radiocsirt.org/vuln/suse-su-2024:2643-1 SUSE-SU-2024:2643-1 — Security update for orc 2026-10-08T17:59:49.333619+00:00

Security update for orc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-40897 UBUNTU-CVE-2024-40897 2026-10-08T17:59:49.333632+00:00

Affected: Ubuntu:Pro:16.04:LTS: orc, Ubuntu:Pro:18.04:LTS: orc, Ubuntu:20.04:LTS: orc, Ubuntu:22.04:LTS: orc, Ubuntu:24.04:LTS: orc

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1684 WID-SEC-W-2024-1684 — GStreamer: Schwachstelle ermöglicht Codeausführung 2026-10-08T17:59:49.333655+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GStreamer ausnutzen, um beliebigen Programmcode auszuführen.