Security advisories

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend

Client-Side Memory Leak in OCSP Response Checking

Path traversal in WriteProtoFiles lets a malicious gRPC reflection server write files outside -proto-out-dir

libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

libssh2 Heap Out-of-Bounds Read via publickey subsystem

libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing

Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer. This issue has been fixed in the commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681

libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation

libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c

libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

Local Privilege Escalation via TOCTOU in mount(8) — Target Path Redirection

Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable — nosuid/noexec Bypass in SUID mount(8)

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

CVE-2026-6069

CVE-2026-6067

llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing

llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix

Heap-buffer-overflow in pcre2_compile_32

Heap-buffer-overflow in opj_j2k_read_tile_header

Heap-buffer-overflow in btf_ensure_modifiable

Heap-buffer-overflow in opj_jp2_apply_pclr

No summary provided.

No summary provided.

llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue.

Helm Files.Lines Denial of Service via Empty Chart Files

root-side banner file disclosure

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position. This results in excessive CPU consumption and prevents the process from completing. An attacker can trigger this behavior by supplying a malicious patch file, causing the utility to become unresponsive and require manual termination. This issue has been fixed in the commit faba04ef4f2b410257f76c1b9dc85e350929c4b9

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing. An attacker can trigger this condition with a malicious patch file, causing the utility to crash and resulting in a denial of service. This issue has been fixed in the commit e6d6a4e021660679d7fc9150f981d4920f722313

GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding

GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This predictable filename is created without exclusive access or existence checks. A local attacker can pre‑create the predicted temporary file path as a symbolic link pointing to an arbitrary file writable by the victim. When gzexe runs, it follows the symlink and overwrites the target file, resulting in a time‑of‑check to time‑of‑use (TOCTOU) condition that allows arbitrary file overwrite. This issue has been fixed in the commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269

Stack buffer overflow in sample/http-server via unbounded Unix socket path (strcpy)

CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

jq: stack overflow in module loading on mutual `include`

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.

A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.

CVE-2026-6068

POP3 command injection in user-controlled commands

(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file.

__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.

Uncontrolled memory allocation in LIEF ELF Note parser (`Note::create`)

Stack-Based Buffer Overflow in libxml2

CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)

CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame

UNKNOWN READ in init_struct_ops_maps

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Connection created for the wrong upstream for forward_auth + reverse_proxy

HTTP Header smuggling

Dangling Pointer in `evbuffer_add_buffer_reference`

libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

decode_tag_internal() can lead to out-of-bounds read

`evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.

HTTP header handling bugs create risk of access control bypass.

pcre2_serialize_encode() information disclosure

Bad-cast to cv::PngDecoder from invalid vptr

Null-dereference READ in _libssh2_packet_add

Null-dereference READ in session_startup

Null-dereference READ in ubsan_GetStackTrace

Null-dereference READ in _libssh2_packet_add

UNKNOWN WRITE in regcomp

Incorrect-function-pointer-type in cv::split

Null-dereference READ in session_startup