https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:38:09.057091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:3066 ALSA-2024:3066 — Moderate: exempi security update 2026-10-05T17:38:09.062707+00:00

Affected: AlmaLinux:8: exempi, AlmaLinux:8: exempi-devel

Exempi provides a library for easy parsing of XMP metadata.

Security Fix(es):

* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651) * exempi: denial of service via opening of crafted webp file (CVE-2020-18652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-192480 EUVD-2026-192480 2026-10-05T17:38:09.062798+00:00 EUVD-2026-192480 https://cve.radiocsirt.org/vuln/fkie_cve-2020-18652 fkie_cve-2020-18652 2026-10-05T17:38:09.062822+00:00

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

 https://cve.radiocsirt.org/vuln/ghsa-fm7g-gm7p-w792 GHSA-fm7g-gm7p-w792 2026-10-05T17:38:09.062858+00:00

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

 https://cve.radiocsirt.org/vuln/gsd-2020-18652 gsd-2020-18652 2026-10-05T17:38:09.062883+00:00 gsd-2020-18652 https://cve.radiocsirt.org/vuln/oesa-2023-1690 OESA-2023-1690 — exempi security update 2026-10-05T17:38:09.062902+00:00

Affected: openEuler:20.03-LTS-SP3: exempi

Exempi is an implementation of XMP. Version 2.x is based on Adobe XMP SDK and released under a BSD-style license like Adobe's. Security Fix(es): Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.(CVE-2020-18651) Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.(CVE-2020-18652) XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.(CVE-2021-40732)

 https://cve.radiocsirt.org/vuln/rhsa-2024:3066 RHSA-2024:3066 — Red Hat Security Advisory: exempi security update 2026-10-05T17:38:09.062958+00:00

exempi: denial of service via opening of crafted audio file with ID3V2 frame exempi: denial of service via opening of crafted webp file

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-18652 UBUNTU-CVE-2020-18652 2026-10-05T17:38:09.062991+00:00

Affected: Ubuntu:16.04:LTS: exempi, Ubuntu:18.04:LTS: exempi

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1213 WID-SEC-W-2024-1213 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-05T17:38:09.063033+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.