CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile
Summary
CVE-2026-116155 discloses a memory leak in ImageMagick's ParseInternalDoctype, where parameter-entity values from crafted XMP DOCTYPE internal subsets are never freed; users are advised to upgrade to ImageMagick 7.1.2-33 or 6.9.13-58 or block XMP profiles via policy.xml.
View Cached Full Text
Cached at: 10/31/26, 03:25 PM
Similar Articles
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)
A heap use-after-free in PHP's session.upload_progress handler (CVE-2026-109618 / -109619) allows attackers to hijack freed bucket pointers and achieve remote code execution via zend_call_function; the writeup includes verified PoC chains for PHP 8.4.4 and 8.2.34 along with pre-patch mitigations.
CVE-2026-45447: Heap Use-After-Free in the OpenSSL PKCS7_verify() Function
A heap use-after-free vulnerability has been reported in the OpenSSL PKCS7_verify() function, potentially allowing attackers to exploit memory corruption.
CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes
A newly disclosed vulnerability, CVE-2026-107891, reveals multiple integer overflows in musl libc's regcomp that can lead to incorrect allocation sizes and out-of-bounds heap writes, disclosed via the Openwall oss-security mailing list.
Critical Ollama Bugs Expose AI Servers to Memory Leaks and Windows RCE
Critical security vulnerabilities in Ollama, including a memory leak exploit dubbed 'Bleeding Llama' and a Windows RCE flaw, have been disclosed, prompting urgent upgrades for users.
CVE-2026-46529: 10-year-old RCE in Linux PDF Viewer (XReader/Evince/Atril)
A security researcher discovered CVE-2026-46529, a 10-year-old remote code execution vulnerability in Linux PDF viewers XReader, Evince, and Atril, caused by insufficient argument quoting when spawning child processes to open remote document links.