TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Priority HIGH 76
A flaw was found in GLib.
RHSA-2026:75659
Red Hat AI Base Images 3.5.2 (ROCm 7.14)
Released 2026-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
Fixes 35 records
TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Priority HIGH 72
A flaw was found in GLib.
TI-2026-13488 CVE-2026-16118 · GHSA-cp7g-r78m-cc2g
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Priority MEDIUM 64
A flaw was found in xdgmime.
TI-2026-13117 CVE-2026-15588 · GHSA-hrq7-vgh7-p534
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Priority MEDIUM 57
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.
TI-2026-46359 CVE-2026-64834 · GHSA-5xcx-3qx2-qv4x
FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
Priority MEDIUM 45
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF strea…
TI-2026-41804 CVE-2026-58049 · GHSA-mjxr-6gqf-w78h
FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
Priority MEDIUM 45
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so…
TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
Priority MEDIUM 45
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
TI-2026-42784 CVE-2026-60002 · GHSA-gp5v-jg37-fvg6
Use after free in OpenBSD OpenSSH
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-46355 CVE-2026-64830 · GHSA-jphx-q7f7-4x8r
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
Priority MEDIUM 41
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…
TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467
tarfile extraction filter bypass allows escaping the destination directory
Priority MEDIUM 41
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.
Priority LOW 39
Vim is an open source, command line text editor.
TI-2026-47028 CVE-2026-66039 · GHSA-84qc-6h9r-4w33
FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
Priority LOW 39
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious byt…
Priority LOW 38
Vim is an open source, command line text editor.
Priority LOW 38
Vim is an open source, command line text editor.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-51283 CVE-2026-73076
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
Priority LOW 37
Vim is an open source, command line text editor.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Priority LOW 37
A flaw was found in GLib.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-39261 CVE-2026-54369 · GHSA-53ch-pxc8-6g72
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
TI-2026-47025 CVE-2026-66036 · GHSA-575m-jfmw-q76c
FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
Priority LOW 36
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution in…
TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Priority LOW 36
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Priority LOW 35
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Priority LOW 34
A flaw was found in GLib.
TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5
Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Priority LOW 34
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-34752 CVE-2026-47162
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
Priority LOW 34
Vim is an open source, command line text editor.
Priority LOW 33
Vim is an open source, command line text editor.
TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Priority LOW 32
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-51273 CVE-2026-73066
Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Priority LOW 29
Tesseract is an open source OCR engine.
Priority LOW 26
Vim is an open source, command line text editor.
TI-2026-34757 CVE-2026-47167
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Priority LOW 24
Vim is an open source, command line text editor.
TI-2026-41387 CVE-2026-57455
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
Priority LOW 20
Vim is an open source, command line text editor.
TI-2025-05580 CVE-2025-6170 · GHSA-6qrf-r65h-2r77
Libxml2: stack buffer overflow in xmllint interactive shell command handling
Priority LOW 13
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.