35
47
35
47
35
47
60
60
ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI discloses CVE-2026-21045, a heap buffer overflow in Samsung Galaxy S25 TIFF processing enabling RCE via malicious files or pages.
ZDI-26-529 describes a heap-based buffer overflow in Samsung Galaxy S25 TIFF file processing that allows remote attackers to execute arbitrary code. User interaction is required, as the target must visit a malicious page or open a malicious file. ZDI assigned a CVSS score of 8.8, tracked as CVE-2026-21045.
45
60
47
60
60
USN-8755-1: libvips vulnerability
Ubuntu patches libvips flaw where crafted TIFF images converted to HEIF cause a crash, enabling denial of service.
USN-8755-1 fixes a libvips vulnerability in which specially crafted TIFF images are incorrectly handled when saved as HEIF, causing the library to crash. The impact is limited to denial of service with no code execution indicated. Ubuntu shipped updated packages.
12
47
60
60
47
60
60
60
60
60
57
60
60
60
57
55
57
Microsoft Fixes Four Zero
60
60
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
50
57
57
30
42
60
57