https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:08:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09514 bdu:2026-09514 https://cve.radiocsirt.org/vuln/bdu:2026-09514 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0563 certfr-2026-avi-0563 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0563 https://cve.radiocsirt.org/vuln/euvd-2026-337526 EUVD-2026-337526 https://cve.radiocsirt.org/vuln/euvd-2026-337526 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1837 <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.</p> <p>This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.</p> <p>This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1837 https://cve.radiocsirt.org/vuln/ghsa-76gx-97cq-65f5 <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.</p> <p>This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.</p> <p>This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> https://cve.radiocsirt.org/vuln/ghsa-76gx-97cq-65f5 https://cve.radiocsirt.org/vuln/ncsc-2026-0138 NCSC-2026-0138 https://cve.radiocsirt.org/vuln/ncsc-2026-0138 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10271-1 <p>libjxl-devel-0.11.2-1.1 on GA media</p> <p>libjxl-devel-0.11.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10271-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0648-1 <p>Security update for libjxl</p> <p>Security update for libjxl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0648-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1837 <p><strong>Affected:</strong> Ubuntu:25.10: jpeg-xl</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> <p><strong>Affected:</strong> Ubuntu:25.10: jpeg-xl</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1837 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1459 <p>Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1459