# Vulnerabilities published in 2026 - [OSV-2026-623](https://insights.sbomify.com/OSV-2026-623/): Use-of-uninitialized-value in Mat_PrintNumber (not scored) - [OSV-2026-621](https://insights.sbomify.com/OSV-2026-621/): Use-of-uninitialized-value in vcardtime_from_string (not scored) - [OSV-2026-620](https://insights.sbomify.com/OSV-2026-620/): Heap-buffer-overflow in ixheaace_process (not scored) - [OSV-2026-616](https://insights.sbomify.com/OSV-2026-616/): Use-of-uninitialized-value in JXRHandlerPrivate::colorSpace (not scored) - [OSV-2026-611](https://insights.sbomify.com/OSV-2026-611/): Heap-buffer-overflow in ParseOpaqueMetadata (not scored) - [OSV-2026-610](https://insights.sbomify.com/OSV-2026-610/): Memcpy-param-overlap in htx_replace_blk_value (not scored) - [OSV-2026-609](https://insights.sbomify.com/OSV-2026-609/): Security exception in com.github.javaparser.ast.NodeList.forEach (not scored) - [OSV-2026-608](https://insights.sbomify.com/OSV-2026-608/): Stack-buffer-overflow in is_http (not scored) - [OSV-2026-605](https://insights.sbomify.com/OSV-2026-605/): Heap-buffer-overflow in DwaCompressor_uncompress (not scored) - [OSV-2026-603](https://insights.sbomify.com/OSV-2026-603/): UNKNOWN READ in ::call_unchecked_raw::< (not scored) - [OSV-2026-600](https://insights.sbomify.com/OSV-2026-600/): Heap-buffer-overflow in skcms_private::baseline::clut (not scored) - [OSV-2026-599](https://insights.sbomify.com/OSV-2026-599/): UNKNOWN READ in XRef::parseEntry (not scored) - [OSV-2026-595](https://insights.sbomify.com/OSV-2026-595/): UNKNOWN WRITE in std::__1::istreambuf_iterator> std::__1::num_g (not scored) - [OSV-2026-589](https://insights.sbomify.com/OSV-2026-589/): Heap-double-free in coap_new_oscore_conf (not scored) - [OSV-2026-582](https://insights.sbomify.com/OSV-2026-582/): Use-of-uninitialized-value in H5S_select_hyperslab (not scored) - [OSV-2026-579](https://insights.sbomify.com/OSV-2026-579/): Heap-buffer-overflow in CEA708_DTVCC_Demuxer_Push (not scored) - [OSV-2026-57](https://insights.sbomify.com/OSV-2026-57/): Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit (not scored) - [OSV-2026-568](https://insights.sbomify.com/OSV-2026-568/): Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut (not scored) - [OSV-2026-565](https://insights.sbomify.com/OSV-2026-565/): Heap-buffer-overflow in xmlFAParsePosCharGroup (not scored) - [OSV-2026-564](https://insights.sbomify.com/OSV-2026-564/): Use-of-uninitialized-value in DoTestOneInput (not scored) - [OSV-2026-563](https://insights.sbomify.com/OSV-2026-563/): UNKNOWN READ in bfd_getl32 (not scored) - [OSV-2026-561](https://insights.sbomify.com/OSV-2026-561/): Global-buffer-overflow in nameMatch (not scored) - [OSV-2026-551](https://insights.sbomify.com/OSV-2026-551/): UNKNOWN WRITE in ___interceptor_free (not scored) - [OSV-2026-55](https://insights.sbomify.com/OSV-2026-55/): Use-of-uninitialized-value in vp9_quantize_fp_avx2 (not scored) - [OSV-2026-548](https://insights.sbomify.com/OSV-2026-548/): UNKNOWN in ojph::local::precinct::parse (not scored) - [OSV-2026-54](https://insights.sbomify.com/OSV-2026-54/): Heap-use-after-free in _dwarf_exec_frame_instr (not scored) - [OSV-2026-539](https://insights.sbomify.com/OSV-2026-539/): Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone (not scored) - [OSV-2026-535](https://insights.sbomify.com/OSV-2026-535/): Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement (not scored) - [OSV-2026-534](https://insights.sbomify.com/OSV-2026-534/): Heap-buffer-overflow in cram_encode_container (not scored) - [OSV-2026-532](https://insights.sbomify.com/OSV-2026-532/): Heap-buffer-overflow in regsub (not scored) - [OSV-2026-53](https://insights.sbomify.com/OSV-2026-53/): Heap-use-after-free in graph::LigatureSubstFormat1::shrink (not scored) - [OSV-2026-521](https://insights.sbomify.com/OSV-2026-521/): UNKNOWN READ in unsigned long Assimp::StreamReader::Get (not scored) - [OSV-2026-518](https://insights.sbomify.com/OSV-2026-518/): Use-of-uninitialized-value in ne_read_block (not scored) - [OSV-2026-514](https://insights.sbomify.com/OSV-2026-514/): Heap-buffer-overflow in format_expand1 (not scored) - [OSV-2026-512](https://insights.sbomify.com/OSV-2026-512/): Heap-buffer-overflow in g_utf8_get_char (not scored) - [OSV-2026-505](https://insights.sbomify.com/OSV-2026-505/): UNKNOWN READ in unsigned int Assimp::StreamReader::Get (not scored) - [OSV-2026-504](https://insights.sbomify.com/OSV-2026-504/): Heap-use-after-free in ObjectStream::getObject (not scored) - [OSV-2026-49](https://insights.sbomify.com/OSV-2026-49/): Heap-buffer-overflow in check_sync_pes (not scored) - [OSV-2026-484](https://insights.sbomify.com/OSV-2026-484/): Heap-buffer-overflow in DecodeBlock (not scored) - [OSV-2026-481](https://insights.sbomify.com/OSV-2026-481/): Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII (not scored) - [OSV-2026-461](https://insights.sbomify.com/OSV-2026-461/): UNKNOWN READ in XRef::constructObjectEntry (not scored) - [OSV-2026-455](https://insights.sbomify.com/OSV-2026-455/): UNKNOWN READ in mkv::matroska_segment_c::TrackInit (not scored) - [OSV-2026-449](https://insights.sbomify.com/OSV-2026-449/): Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry (not scored) - [OSV-2026-44](https://insights.sbomify.com/OSV-2026-44/): UNKNOWN READ in MP4_TrackSeek (not scored) - [OSV-2026-437](https://insights.sbomify.com/OSV-2026-437/): Heap-use-after-free in tf::Executor::_invoke (not scored) - [OSV-2026-431](https://insights.sbomify.com/OSV-2026-431/): Use-of-uninitialized-value in pcpp::IDnsResource::decodeName (not scored) - [OSV-2026-417](https://insights.sbomify.com/OSV-2026-417/): Segv on unknown address in arrow::Array::IsNull (not scored) - [OSV-2026-392](https://insights.sbomify.com/OSV-2026-392/): UNKNOWN READ in pcpp::BgpLayer::getHeaderLen (not scored) - [OSV-2026-387](https://insights.sbomify.com/OSV-2026-387/): Security exception in org.apache.poi.ss.formula.FormulaParser.parseSheetRange (not scored) - [OSV-2026-386](https://insights.sbomify.com/OSV-2026-386/): Use-of-uninitialized-value in pcpp::byteArrayToHexString (not scored) - [OSV-2026-374](https://insights.sbomify.com/OSV-2026-374/): Security exception in org.apache.poi.ss.formula.FormulaParser.additiveExpression (not scored) - [OSV-2026-371](https://insights.sbomify.com/OSV-2026-371/): Heap-buffer-overflow in tinyobj::tryParseDouble (not scored) - [OSV-2026-36](https://insights.sbomify.com/OSV-2026-36/): Heap-buffer-overflow in iTUNTripletCallback (not scored) - [OSV-2026-359](https://insights.sbomify.com/OSV-2026-359/): Segv on unknown address in gpsd_vlog (not scored) - [OSV-2026-357](https://insights.sbomify.com/OSV-2026-357/): Heap-buffer-overflow in _cupsRasterAddError (not scored) - [OSV-2026-354](https://insights.sbomify.com/OSV-2026-354/): Use-of-uninitialized-value in pcpp::MplsLayer::toString (not scored) - [OSV-2026-350](https://insights.sbomify.com/OSV-2026-350/): UNKNOWN READ in bfd_getl32 (not scored) - [OSV-2026-344](https://insights.sbomify.com/OSV-2026-344/): UNKNOWN READ in void Assimp::Blender::ConvertDispatcher (not scored) - [OSV-2026-343](https://insights.sbomify.com/OSV-2026-343/): Heap-buffer-overflow in pcre2_compile_32 (not scored) - [OSV-2026-341](https://insights.sbomify.com/OSV-2026-341/): Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal (not scored) - [OSV-2026-338](https://insights.sbomify.com/OSV-2026-338/): Use-of-uninitialized-value in pjsip_auth_clt_init_req (not scored) - [OSV-2026-324](https://insights.sbomify.com/OSV-2026-324/): Security exception in java.base/java.util.Arrays.copyOfRange (not scored) - [OSV-2026-311](https://insights.sbomify.com/OSV-2026-311/): UNKNOWN READ in strncasecmp (not scored) - [OSV-2026-308](https://insights.sbomify.com/OSV-2026-308/): Heap-buffer-overflow in vcardstructured_new_from_string (not scored) - [OSV-2026-307](https://insights.sbomify.com/OSV-2026-307/): Global-buffer-overflow in navcom_parse (not scored) - [OSV-2026-304](https://insights.sbomify.com/OSV-2026-304/): Heap-use-after-free in tf::Executor::_invoke (not scored) - [OSV-2026-302](https://insights.sbomify.com/OSV-2026-302/): Use-of-uninitialized-value in BIO_new_file (not scored) - [OSV-2026-301](https://insights.sbomify.com/OSV-2026-301/): Use-of-uninitialized-value in pcpp::IPv6Extension::getExtensionLen (not scored) - [OSV-2026-300](https://insights.sbomify.com/OSV-2026-300/): UNKNOWN WRITE in nmeaid_to_prn (not scored) - [OSV-2026-30](https://insights.sbomify.com/OSV-2026-30/): Use-of-uninitialized-value in vp9_quantize_fp_avx2 (not scored) - [OSV-2026-297](https://insights.sbomify.com/OSV-2026-297/): Security exception in org.apache.poi.util.IOUtils.safelyAllocate (not scored) - [OSV-2026-292](https://insights.sbomify.com/OSV-2026-292/): UNKNOWN WRITE in ::call_unchecked_raw::< (not scored) - [OSV-2026-272](https://insights.sbomify.com/OSV-2026-272/): Heap-use-after-free in vcardproperty_get_value (not scored) - [OSV-2026-261](https://insights.sbomify.com/OSV-2026-261/): Segv on unknown address in ___interceptor_strtol (not scored) - [OSV-2026-259](https://insights.sbomify.com/OSV-2026-259/): Use-of-uninitialized-value in tsip_parse_input (not scored) - [OSV-2026-255](https://insights.sbomify.com/OSV-2026-255/): UNKNOWN WRITE in nmeaid_to_prn (not scored) - [OSV-2026-246](https://insights.sbomify.com/OSV-2026-246/): Use-of-uninitialized-value in printAddressingMode (not scored) - [OSV-2026-244](https://insights.sbomify.com/OSV-2026-244/): Use-of-uninitialized-value in ihevcd_fmt_conv (not scored) - [OSV-2026-242](https://insights.sbomify.com/OSV-2026-242/): Use-of-uninitialized-value in ntrip_parse_url (not scored) - [OSV-2026-240](https://insights.sbomify.com/OSV-2026-240/): Use-of-uninitialized-value in packet_get1 (not scored) - [OSV-2026-229](https://insights.sbomify.com/OSV-2026-229/): Segv on unknown address in aiAnimation::~aiAnimation (not scored) - [OSV-2026-226](https://insights.sbomify.com/OSV-2026-226/): UNKNOWN WRITE in decode_xa2_00 (not scored) - [OSV-2026-216](https://insights.sbomify.com/OSV-2026-216/): Heap-buffer-overflow in mg_mqtt_next_prop (not scored) - [OSV-2026-215](https://insights.sbomify.com/OSV-2026-215/): UNKNOWN READ in getTypeCacheHashTableBucket (not scored) - [OSV-2026-212](https://insights.sbomify.com/OSV-2026-212/): UNKNOWN READ in gpsd_poll (not scored) - [OSV-2026-21](https://insights.sbomify.com/OSV-2026-21/): Use-of-uninitialized-value in processTLSBlock (not scored) - [OSV-2026-209](https://insights.sbomify.com/OSV-2026-209/): Use-of-uninitialized-value in ntrip_parse_url (not scored) - [OSV-2026-205](https://insights.sbomify.com/OSV-2026-205/): UNKNOWN READ in gpsd_poll (not scored) - [OSV-2026-204](https://insights.sbomify.com/OSV-2026-204/): Segv on unknown address in icalarray_append (not scored) - [OSV-2026-203](https://insights.sbomify.com/OSV-2026-203/): Segv on unknown address in glslang::TIntermediate::addSymbol (not scored) - [OSV-2026-200](https://insights.sbomify.com/OSV-2026-200/): Global-buffer-overflow in nameMatch (not scored) - [OSV-2026-2](https://insights.sbomify.com/OSV-2026-2/): Heap-buffer-overflow in cmt_mpack_consume_uint_tag (not scored) - [OSV-2026-196](https://insights.sbomify.com/OSV-2026-196/): Null-dereference READ in ubsan_GetStackTrace (not scored) - [OSV-2026-195](https://insights.sbomify.com/OSV-2026-195/): Use-of-uninitialized-value in vcardstructured_free (not scored) - [OSV-2026-189](https://insights.sbomify.com/OSV-2026-189/): Global-buffer-overflow in gpsd_poll (not scored) - [OSV-2026-182](https://insights.sbomify.com/OSV-2026-182/): Use-of-uninitialized-value in json_internal_read_object (not scored) - [OSV-2026-177](https://insights.sbomify.com/OSV-2026-177/): Security exception in org.apache.poi.util.IOUtils.safelyAllocate (not scored) - [OSV-2026-170](https://insights.sbomify.com/OSV-2026-170/): Use-of-uninitialized-value in pcpp::PcapNgFileReaderDevice::getNextPacketInternal (not scored) - [OSV-2026-169](https://insights.sbomify.com/OSV-2026-169/): Null-dereference READ in execute_post_instantiate_functions (not scored) - [OSV-2026-167](https://insights.sbomify.com/OSV-2026-167/): Use-of-uninitialized-value in aivdm_analyze (not scored) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/8/