Search CVE reports


Toggle filters

161 – 170 of 42993 results

Status is adjusted based on your filters.


CVE-2026-39853

Medium priority
Needs evaluation

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS#7...

1 affected package

osslsigncode

Package 18.04 LTS
osslsigncode Needs evaluation
Show less packages

CVE-2025-15480

Medium priority
Not affected

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the...

1 affected package

subiquity

Package 18.04 LTS
subiquity Not affected
Show less packages

CVE-2025-14551

Medium priority
Needs evaluation

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as...

1 affected package

subiquity

Package 18.04 LTS
subiquity Needs evaluation
Show less packages

CVE-2026-5445

Medium priority
Needs evaluation

An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5444

Medium priority
Needs evaluation

A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are multiplied using 32-bit unsigned arithmetic. Specially chosen...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5443

Medium priority
Needs evaluation

A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5442

Medium priority
Needs evaluation

A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR Unsigned Short (US), which allows extremely large...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5441

Medium priority
Needs evaluation

An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.cpp`. The `PMSCT_RLE1` decompression routine, which decodes the proprietary Philips Compression format, does not properly validate...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5440

Medium priority
Needs evaluation

A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `Content-Length` header. The server allocates memory directly based on the attacker supplied header value without enforcing an upper limit. A...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages

CVE-2026-5439

Medium priority
Needs evaluation

A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically extracts ZIP archives uploaded to certain endpoints and trusts metadata fields describing the uncompressed size of archived files. An...

1 affected package

orthanc

Package 18.04 LTS
orthanc Needs evaluation
Show less packages