CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVSS
9.8
Critical
EPSS
8.0%
p95
KEV
—
Exploit Today
28
0-100
Published: Jun 19, 2019 · Last modified: Oct 14, 2026 · CWE-787
8.0%EPSS · 30 days8.0%
2026-10-022026-10-29
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
- gitlab.comhttps://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
- lists.apache.orghttps://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
- lists.apache.orghttps://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
- lists.apache.orghttps://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
- seclists.orghttps://seclists.org/bugtraq/2019/Aug/4
- seclists.orghttps://seclists.org/bugtraq/2019/Jul/22
- security.freebsd.orghttps://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
- support.f5.comhttps://support.f5.com/csp/article/K68713584?utm_source=f5support&%3Butm_medium=RSS
- usn.ubuntu.comhttps://usn.ubuntu.com/4038-1/
- usn.ubuntu.comhttps://usn.ubuntu.com/4038-2/
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-784027.8 HIG—
———Stack-based buffer overflow and out-of-bounds
write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow
Buffers.
Sentinel Keys Server does not check the length of the first field in
the input message. A local attacker may craft an input and send it to Sentinel
Keys Server. It may lead to code execution as NT AUTHORITY\SYSTEM enabling
local privilege escalation.
This issue affects Sentinel Keys Server: versions
lower than 1.3.8.0.8hCVE-2026-1197777.8 HIG—
———A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to execute code in the context of the affected application.8hCVE-2026-1040677.8 HIG—
———Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code execution as the user.9hCVE-2026-1040667.8 HIG—
———Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing crashes or code execution.9hCVE-2026-1040657.8 HIG—
———Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing crashes or code execution.9hCVE-2026-1040627.8 HIG—
———Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing or importing it crashes Scribus and may execute code as the user.9h