# Vulnerabilities published in 2026 - [OSV-2026-970](https://insights.sbomify.com/OSV-2026-970/): Use-of-uninitialized-value in ogs_cpystrn (not scored) - [OSV-2026-97](https://insights.sbomify.com/OSV-2026-97/): Heap-buffer-overflow in vpx_wb_write_literal (not scored) - [OSV-2026-969](https://insights.sbomify.com/OSV-2026-969/): Heap-use-after-free in Ogre::VertexData::convertPackedColour (not scored) - [OSV-2026-963](https://insights.sbomify.com/OSV-2026-963/): Bad-cast to Ogre::HardwareBuffer from invalid vptr (not scored) - [OSV-2026-962](https://insights.sbomify.com/OSV-2026-962/): Use-of-uninitialized-value in iup_delta_optimize (not scored) - [OSV-2026-959](https://insights.sbomify.com/OSV-2026-959/): Heap-use-after-free in Wt::Http::Request::parseFormUrlEncoded (not scored) - [OSV-2026-958](https://insights.sbomify.com/OSV-2026-958/): Use-of-uninitialized-value in LibRaw::fbdd (not scored) - [OSV-2026-933](https://insights.sbomify.com/OSV-2026-933/): UNKNOWN READ in aiMesh::~aiMesh (not scored) - [OSV-2026-928](https://insights.sbomify.com/OSV-2026-928/): Stack-use-after-scope in StreamReader_CApi::wait_for_file_size (not scored) - [OSV-2026-925](https://insights.sbomify.com/OSV-2026-925/): Heap-buffer-overflow in ssh_config_parse_line_internal (not scored) - [OSV-2026-923](https://insights.sbomify.com/OSV-2026-923/): Heap-use-after-free in gf_node_unregister (not scored) - [OSV-2026-917](https://insights.sbomify.com/OSV-2026-917/): Heap-buffer-overflow in ixheaace_process (not scored) - [OSV-2026-910](https://insights.sbomify.com/OSV-2026-910/): Heap-use-after-free in gf_node_unregister (not scored) - [OSV-2026-91](https://insights.sbomify.com/OSV-2026-91/): Use-after-poison in compress.cc (not scored) - [OSV-2026-907](https://insights.sbomify.com/OSV-2026-907/): Heap-use-after-free in gf_sg_route_del (not scored) - [OSV-2026-903](https://insights.sbomify.com/OSV-2026-903/): UNKNOWN in avi_parse_input_file (not scored) - [OSV-2026-895](https://insights.sbomify.com/OSV-2026-895/): Heap-buffer-overflow in ihevcd_fmt_conv (not scored) - [OSV-2026-892](https://insights.sbomify.com/OSV-2026-892/): Heap-buffer-overflow in decode_R13_RNUMBER (not scored) - [OSV-2026-889](https://insights.sbomify.com/OSV-2026-889/): Use-of-uninitialized-value in vp8_compute_skin_block (not scored) - [OSV-2026-886](https://insights.sbomify.com/OSV-2026-886/): Heap-buffer-overflow in ihevcd_fmt_conv (not scored) - [OSV-2026-882](https://insights.sbomify.com/OSV-2026-882/): Null-dereference READ in cram_decoder_init (not scored) - [OSV-2026-880](https://insights.sbomify.com/OSV-2026-880/): Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal (not scored) - [OSV-2026-879](https://insights.sbomify.com/OSV-2026-879/): Heap-use-after-free in lsr_restore_base (not scored) - [OSV-2026-872](https://insights.sbomify.com/OSV-2026-872/): Use-of-uninitialized-value in vpx_variance16x16_avx2 (not scored) - [OSV-2026-87](https://insights.sbomify.com/OSV-2026-87/): Security exception in org.apache.poi.util.IOUtils.safelyAllocate (not scored) - [OSV-2026-868](https://insights.sbomify.com/OSV-2026-868/): Use-of-uninitialized-value in vp8_regular_quantize_b_sse4_1 (not scored) - [OSV-2026-867](https://insights.sbomify.com/OSV-2026-867/): Bad-cast to std::__shared_weak_count from invalid vptr (not scored) - [OSV-2026-863](https://insights.sbomify.com/OSV-2026-863/): Global-buffer-overflow in cram_decoder_init (not scored) - [OSV-2026-860](https://insights.sbomify.com/OSV-2026-860/): UNKNOWN READ in write_publickey (not scored) - [OSV-2026-86](https://insights.sbomify.com/OSV-2026-86/): Security exception in java.base/java.util.Arrays.copyOfRange (not scored) - [OSV-2026-855](https://insights.sbomify.com/OSV-2026-855/): Heap-use-after-free in gf_sg_reset (not scored) - [OSV-2026-853](https://insights.sbomify.com/OSV-2026-853/): Stack-buffer-overflow in log4cxx::helpers::Transcoder::decode (not scored) - [OSV-2026-850](https://insights.sbomify.com/OSV-2026-850/): Heap-buffer-overflow in opus_repacketizer_out_range_impl (not scored) - [OSV-2026-846](https://insights.sbomify.com/OSV-2026-846/): Bad-cast to AMFColor from AMFMetadata (not scored) - [OSV-2026-837](https://insights.sbomify.com/OSV-2026-837/): Heap-use-after-free in grk::TileProcessor::parseTilePart (not scored) - [OSV-2026-828](https://insights.sbomify.com/OSV-2026-828/): Use-of-uninitialized-value in ReadContainer (not scored) - [OSV-2026-824](https://insights.sbomify.com/OSV-2026-824/): Stack-buffer-overflow in coolkey_rsa_op (not scored) - [OSV-2026-823](https://insights.sbomify.com/OSV-2026-823/): Heap-buffer-overflow in ihevcd_fmt_conv_422sp_to_420p (not scored) - [OSV-2026-822](https://insights.sbomify.com/OSV-2026-822/): Heap-use-after-free in slice_segment_header::operator= (not scored) - [OSV-2026-816](https://insights.sbomify.com/OSV-2026-816/): Heap-buffer-overflow in md_process_all_blocks (not scored) - [OSV-2026-815](https://insights.sbomify.com/OSV-2026-815/): Heap-buffer-overflow in ihevcd_sao_shift_ctb (not scored) - [OSV-2026-812](https://insights.sbomify.com/OSV-2026-812/): Heap-buffer-overflow in ihevcd_fmt_conv_422sp_to_420p (not scored) - [OSV-2026-808](https://insights.sbomify.com/OSV-2026-808/): Heap-buffer-overflow in ihevcd_fmt_conv (not scored) - [OSV-2026-806](https://insights.sbomify.com/OSV-2026-806/): Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal (not scored) - [OSV-2026-805](https://insights.sbomify.com/OSV-2026-805/): Heap-buffer-overflow in ihevcd_fmt_conv (not scored) - [OSV-2026-803](https://insights.sbomify.com/OSV-2026-803/): Container-overflow in OpenBabel::MDLFormat::ReadV3000Block (not scored) - [OSV-2026-798](https://insights.sbomify.com/OSV-2026-798/): Heap-use-after-free in ReplaceDEFNode (not scored) - [OSV-2026-796](https://insights.sbomify.com/OSV-2026-796/): UNKNOWN READ in processXDR (not scored) - [OSV-2026-795](https://insights.sbomify.com/OSV-2026-795/): Stack-buffer-underflow in probe_dasd_pt (not scored) - [OSV-2026-791](https://insights.sbomify.com/OSV-2026-791/): Segv on unknown address in ___interceptor_strtol (not scored) - [OSV-2026-788](https://insights.sbomify.com/OSV-2026-788/): UNKNOWN READ in Mat_VarGetStructsLinear (not scored) - [OSV-2026-785](https://insights.sbomify.com/OSV-2026-785/): Heap-double-free in _dwarf_load_elf_symtab_symbols (not scored) - [OSV-2026-777](https://insights.sbomify.com/OSV-2026-777/): Heap-buffer-overflow in md_is_link_title (not scored) - [OSV-2026-767](https://insights.sbomify.com/OSV-2026-767/): Heap-use-after-free in gf_sg_reset (not scored) - [OSV-2026-765](https://insights.sbomify.com/OSV-2026-765/): Heap-use-after-free in gf_node_get_id (not scored) - [OSV-2026-764](https://insights.sbomify.com/OSV-2026-764/): Heap-use-after-free in JS_DefineProperty (not scored) - [OSV-2026-762](https://insights.sbomify.com/OSV-2026-762/): Heap-buffer-overflow in coap_pdu_parse_header (not scored) - [OSV-2026-760](https://insights.sbomify.com/OSV-2026-760/): Heap-buffer-overflow in md_decode_utf8__ (not scored) - [OSV-2026-76](https://insights.sbomify.com/OSV-2026-76/): Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement (not scored) - [OSV-2026-759](https://insights.sbomify.com/OSV-2026-759/): UNKNOWN READ in bfd_getb32 (not scored) - [OSV-2026-752](https://insights.sbomify.com/OSV-2026-752/): Heap-buffer-overflow in Mat_VarGetStructsLinear (not scored) - [OSV-2026-750](https://insights.sbomify.com/OSV-2026-750/): Heap-buffer-overflow in MqttDecode_Props (not scored) - [OSV-2026-748](https://insights.sbomify.com/OSV-2026-748/): Heap-buffer-overflow in p11_lexer_next (not scored) - [OSV-2026-747](https://insights.sbomify.com/OSV-2026-747/): Heap-buffer-overflow in coap_persist_startup_lkd (not scored) - [OSV-2026-744](https://insights.sbomify.com/OSV-2026-744/): Heap-double-free in _dwarf_destruct_elf_nlaccess (not scored) - [OSV-2026-743](https://insights.sbomify.com/OSV-2026-743/): UNKNOWN READ in persist_target.c (not scored) - [OSV-2026-741](https://insights.sbomify.com/OSV-2026-741/): Heap-buffer-overflow in p11_lexer_next (not scored) - [OSV-2026-74](https://insights.sbomify.com/OSV-2026-74/): Heap-buffer-overflow in ___interceptor_strtol (not scored) - [OSV-2026-736](https://insights.sbomify.com/OSV-2026-736/): Heap-buffer-overflow in coap_pdu_parse_header (not scored) - [OSV-2026-733](https://insights.sbomify.com/OSV-2026-733/): Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg (not scored) - [OSV-2026-728](https://insights.sbomify.com/OSV-2026-728/): Stack-buffer-overflow in autoload_external_files (not scored) - [OSV-2026-727](https://insights.sbomify.com/OSV-2026-727/): Global-buffer-overflow in md_start_new_block (not scored) - [OSV-2026-726](https://insights.sbomify.com/OSV-2026-726/): Use-after-poison in md_build_attribute (not scored) - [OSV-2026-721](https://insights.sbomify.com/OSV-2026-721/): Heap-buffer-overflow in H5D__scatter_mem (not scored) - [OSV-2026-720](https://insights.sbomify.com/OSV-2026-720/): Heap-buffer-overflow in coap_persist_startup_lkd (not scored) - [OSV-2026-718](https://insights.sbomify.com/OSV-2026-718/): Heap-buffer-overflow in md_parse (not scored) - [OSV-2026-717](https://insights.sbomify.com/OSV-2026-717/): Stack-use-after-scope in enter_block_callback (not scored) - [OSV-2026-716](https://insights.sbomify.com/OSV-2026-716/): Heap-buffer-overflow in H5VM_memcpyvv (not scored) - [OSV-2026-713](https://insights.sbomify.com/OSV-2026-713/): Use-of-uninitialized-value in ojph::local::tile::pull (not scored) - [OSV-2026-712](https://insights.sbomify.com/OSV-2026-712/): Heap-buffer-overflow in Mat_VarGetCellsLinear (not scored) - [OSV-2026-711](https://insights.sbomify.com/OSV-2026-711/): Use-of-uninitialized-value in jxl::PerformMulBlending (not scored) - [OSV-2026-710](https://insights.sbomify.com/OSV-2026-710/): UNKNOWN WRITE in ojph::local::precinct::parse (not scored) - [OSV-2026-707](https://insights.sbomify.com/OSV-2026-707/): Global-buffer-overflow in txt2sd (not scored) - [OSV-2026-703](https://insights.sbomify.com/OSV-2026-703/): Heap-use-after-free in js_atomics_op (not scored) - [OSV-2026-699](https://insights.sbomify.com/OSV-2026-699/): Use-of-uninitialized-value in Mat_VarGetSize (not scored) - [OSV-2026-696](https://insights.sbomify.com/OSV-2026-696/): Use-of-uninitialized-value in JXRHandler::read (not scored) - [OSV-2026-678](https://insights.sbomify.com/OSV-2026-678/): UNKNOWN WRITE in ___interceptor_strncpy (not scored) - [OSV-2026-666](https://insights.sbomify.com/OSV-2026-666/): Heap-use-after-free in insertkey (not scored) - [OSV-2026-664](https://insights.sbomify.com/OSV-2026-664/): Heap-buffer-overflow in DwaCompressor_uncompress (not scored) - [OSV-2026-659](https://insights.sbomify.com/OSV-2026-659/): Heap-buffer-overflow in ___interceptor_strncpy (not scored) - [OSV-2026-655](https://insights.sbomify.com/OSV-2026-655/): Heap-buffer-overflow in lj_record_idx (not scored) - [OSV-2026-653](https://insights.sbomify.com/OSV-2026-653/): Heap-buffer-overflow in generic_unpack (not scored) - [OSV-2026-651](https://insights.sbomify.com/OSV-2026-651/): Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal (not scored) - [OSV-2026-650](https://insights.sbomify.com/OSV-2026-650/): Use-of-uninitialized-value in Mat_int32Swap (not scored) - [OSV-2026-649](https://insights.sbomify.com/OSV-2026-649/): Container-overflow in OGRGeometryFactory::organizePolygons (not scored) - [OSV-2026-646](https://insights.sbomify.com/OSV-2026-646/): Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimized (not scored) - [OSV-2026-634](https://insights.sbomify.com/OSV-2026-634/): Index-out-of-bounds in sas7bdat_submit_columns_if_needed (not scored) - [OSV-2026-632](https://insights.sbomify.com/OSV-2026-632/): Use-of-uninitialized-value in PKFormatConverter_InitializeConvert (not scored) - [OSV-2026-630](https://insights.sbomify.com/OSV-2026-630/): Use-of-uninitialized-value in JXRHandlerPrivate::readTextMeta (not scored) - [OSV-2026-629](https://insights.sbomify.com/OSV-2026-629/): Security exception in org.apache.thrift.protocol.TProtocolUtil.skip (not scored) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/7/