Posted by Khashayar Fereidani on Sep 26# usvg SVGZ decompression bomb in `Tree::from_data` **Author:** Khashayar Fereidani **Disclosure Date:** 2026-09-18 **Advisory:** https://fereidani.com/usvg-svgz-decompression-bomb-in-treefromdata **Contact:** https://fereidani.com/contact ## Description `Tree::from_data` in... Weiterlesen: usvg SVGZ decompression bomb in `Tree::from_data`
Intelligence View
⚡ tsecurity.de Intelligence
usvg SVGZ decompression bomb in `Tree::from_data`
Posted by Khashayar Fereidani on Sep 26# usvg SVGZ decompression bomb in `Tree::from_data` **Author:** Khashayar Fereidani **Disclosure Date:** 2026-09-18…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
27 Quellen
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
26 weitere Quellen
VVulDB Updatesvor 9 Std.CVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444) VVulDB Updatesvor 8 Std.CVE-2026-90095 | Linux Kernel FUSE fuse_uring_cmd deadlock (WID-SEC-2026-3444)
+20
11 Quellen
CVE-2025-10536 | Mozilla Firefox up to 142 information disclosure (Nessus ID 265350 / WID-SEC-2025-2074)
10 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2025-10532 | Mozilla Firefox up to 142 unusual condition (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10529 | Mozilla Firefox up to 142 cross-domain policy (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10533 | Mozilla Firefox up to 142 integer overflow (Nessus ID 265350 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10527 | Mozilla Firefox up to 142 use after free (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10528 | Mozilla Firefox up to 142 protection mechanism (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 9 Std.CVE-2026-90094 | Linux Kernel up to 6.18.51/7.2.5 arm64 information disclosure (WID-SEC-2026-3444)
+4
10 Quellen
Mehrere Probleme in perl-Text-Markdown-Discount (Fedora)
9 weitere Quellen
PPro-Linux Securityvor 5 Std.Mehrere Probleme in perl-HTML-Query (Fedora) PPro-Linux Securityvor 5 Std.Mehrere Probleme in rt (Fedora) PPro-Linux Securityvor 5 Std.Mehrere Probleme in perl-Markdown-Render (Fedora) PPro-Linux Securityvor 5 Std.Mehrere Probleme in perl-Encoding-FixLatin (Fedora) PPro-Linux Securityvor 5 Std.Mehrere Probleme in perl-CSS-Inliner (Fedora) PPro-Linux Securityvor 5 Std.Mehrere Probleme in perl-Badger (Fedora)
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4213024/it-security-nachrichten/usvg-svgz-decompression-bomb-in-treefromdata/