CVE-2026-81645
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.
CVSS
5.9
Medio
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 24 sept 2026 · Última mod.: 24 sept 2026 · CWE-125
Sin historial EPSS suficiente todavía.
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletin/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinlaptops/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinvision/2026/9/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinwearables/2026/9/
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-965462.5 BAJ—
——0A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately following the pixel buffer is inaccessible; no information disclosure or code execution has been demonstrated.14hCVE-2026-965454.4 MED—
——0An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents into the decoded image and may crash the plug-in.13hCVE-2026-888405.3 MED—
——0BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.13hCVE-2026-888356.1 MED—
——0BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.13hCVE-2026-79616—4.6%
——1Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.18hCVE-2026-918176.1 MED4.8%
——1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash.15h