Skip to content
Threat Feed
Subscribe

Tag

Oob-Read

3 briefs RSS
high advisory

Pillow Out-of-Bounds Read Vulnerability in McIdas AREA Plugin (CVE-2026-54058)

The Pillow library contains an out-of-bounds read vulnerability in its McIdas AREA plugin when processing specially crafted image files opened from a filename, allowing an attacker to manipulate header words to define a 'stride' value smaller than the actual row width, leading to information disclosure through adjacent process memory leakage or denial of service due to a process crash (SIGBUS).

Pillow < 12.3.0 pillow oob-read image-processing vulnerability information-disclosure denial-of-service python
2t 1c
high threat

Linux Kernel ip_gre Module Vulnerability CVE-2026-63829

A vulnerability identified as CVE-2026-63829 affects the `ip_gre` module in the Linux kernel, involving a security fix to ensure that the `changelink` operation properly requires `CAP_NET_ADMIN` capabilities within the device's network namespace, addressing a potential privilege escalation or security bypass scenario.

exploited Linux Kernel linux vulnerability kernel privilege-escalation nfs information-disclosure linux-kernel oob-read
1c
low advisory

Libarchive Heap Overflow and Out-of-Bounds Read via Pax Extended Header (CVE-2026-15028)

A heap overflow and out-of-bounds read vulnerability (CVE-2026-15028) has been identified in the Libarchive library, triggered by parsing a tar archive with a specially crafted pax extended header, potentially leading to denial of service or arbitrary code execution.

Libarchive vulnerability heap-overflow oob-read rce dos supply-chain
1c