← Benjamin Ali

Advisories

Coordinated disclosures, newest first. Machine-readable as JSON or CSAF 2.0.

14 Advisories
11 Products
14 Fixed upstream

Timeline

  1. DCMTK fixed
    Invalid C++ downcast parsing the DICOM meta-header group length in DCMTK
    found11 Aug 2026reported19 Aug 2026fixed19 Aug 2026disclosed24 Aug 2026
  2. libtsm fixed
    Memory-safety bugs in libtsm's VTE terminal escape-sequence parser
    found6 Aug 2026reported7 Aug 2026fixed14 Aug 2026disclosed17 Aug 2026
  3. libnfs fixed
    Heap out-of-bounds read in libnfs NFSv4 GETATTR fattr4 decode
    found13 Jul 2026reported27 Jul 2026fixed28 Jul 2026
  4. libsmb2 fixed
    Heap out-of-bounds reads in libsmb2 QUERY INFO filesystem decoders
    found13 Jul 2026reported27 Jul 2026fixed28 Jul 2026
  5. libebml fixed
    Missing master backport of an EBML element-size guard in libebml
    found22 Jul 2026reported22 Jul 2026fixed24 Jul 2026
  6. zchunk fixed
    Memory-safety issues in zchunk .zck header, index, and range parsing
    found22 Jul 2026reported22 Jul 2026fixed30 Jul 2026disclosed3 Aug 2026
  7. libiscsi fixed
    Out-of-bounds reads and a write in libiscsi SCSI data-in unmarshalling
    found13 Jul 2026reported21 Jul 2026fixed3 Aug 2026disclosed4 Aug 2026
  8. libConfuse fixed
    Empty comment causes a null dereference in libConfuse
    found18 Jul 2026reported20 Jul 2026fixed20 Jul 2026disclosed21 Jul 2026
  9. basis_universal fixed
    Excessive KTX2 layer count causes allocation-failure abort in basis_universal
    found18 Jul 2026reported18 Jul 2026fixed18 Jul 2026
  10. basis_universal fixed
    Integer overflow leading to an out-of-bounds read in basis_universal KTX2 parsing
    found18 Jul 2026reported18 Jul 2026fixed18 Jul 2026
  11. libmysofa fixed
    Denial of service (unbounded iteration) in libmysofa SOFA parsing
    found10 Jul 2026reported10 Jul 2026fixed19 Jul 2026
  12. libnfs fixed
    Heap out-of-bounds read in libnfs ZDR fixed-opaque decode
    found10 Jul 2026reported10 Jul 2026fixed27 Jul 2026
  13. libsmb2 fixed
    Heap out-of-bounds read in libsmb2 NTLM CHALLENGE decode
    found10 Jul 2026reported10 Jul 2026fixed27 Jul 2026
  14. dr_libs (dr_flac) fixed
    Heap out-of-bounds read in dr_flac SEEKTABLE metadata parsing
    found9 Jul 2026reported9 Jul 2026fixed14 Jul 2026