These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a truncated mask resource, the icns_decompress function continues reading past the bounds of the buffer. This out-of-bounds read vulnerability results in i [truncated]
A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zsize) are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value (65535), the multiplication ysize * zsize overflows the standard 32-bit int boundary before being passed to calloc. This in [truncated]
CVE-2026-16615 is a medium-severity vulnerability in librest's PKCE implementation for OAuth authorization. The flaw uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. This results in a generated 'code verifier' that lacks sufficient cryptographic entropy, allowing a malicious actor to reverse-engineer the pseudo-random number generator (PRNG) seed to p [truncated]
A buffer over-read vulnerability was found in GLib's g_io_channel_read_line_backend() function. This issue occurs when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. The vulnerability can lead to a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-06-30T13:19:17.330Z and has not been modified since then. The g_regex_replace function in GLib is vulnerable to a buffer over-read when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes. This can cause a denial of service and potentially disclose 1-5 bytes of information. The [truncated]
CVE-2026-6653 is a Use After Free vulnerability in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0. A remote attacker can cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling. This CVE was published on 2026-06-22 and has a CVSS score of 7, indicating a High severity. Defenders should assess their exposure and prioritize patching.
A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or modification. Later, during contact deletion, the URI is processed with a less strict check, leading to the deletion [truncated]
A heap corruption vulnerability exists in GNOME Fonts Viewer 3.34.0 that can be triggered through maliciously crafted TTF font files. The vulnerability involves an out-of-bounds write condition that attackers may exploit by supplying a specially crafted font with an oversized pattern, leading to memory exhaustion through repeated memory allocation calls and potential process crash. The CVSS 4.0 vector ind [truncated]
CVE-2016-6163 is a denial-of-service vulnerability in librsvg2 2.40.2. NVD describes the flaw as an out-of-bounds read in rsvg_pattern_fix_fallback in rsvg-paint_server.c, reachable through a crafted SVG file. The weakness is classified as CWE-125, and NVD rates the impact as availability-only loss with no confidentiality or integrity impact. The affected product entry in the NVD record is gnome:librsvg:2 [truncated]