| CVE-2026-91057 |
`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the…
|
4.6
Medium
|
Oct 20, 2026 |
| CVE-2026-92454 |
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what…
|
6.1
Medium
|
Oct 20, 2026 |
| CVE-2026-91059 |
The GUIX JPEG software decoder enforces no ordering on JPEG markers
|
6.8
Medium
|
Oct 20, 2026 |
| CVE-2026-91189 |
The GUIX binary resource loader never checks that a font page's glyph range is well formed
|
7.1
High
|
Oct 20, 2026 |
| CVE-2026-92446 |
`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and…
|
6.8
Medium
|
Oct 20, 2026 |
| CVE-2026-92449 |
`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value…
|
6.8
Medium
|
Oct 20, 2026 |
| CVE-2026-91186 |
The PNG chunk reader has no notion of chunk ordering
|
8.4
High
|
Oct 20, 2026 |