PT-2026-41801 · Red Os · Red Os

Osidb Bzimport · Published 2026-05-17 · Updated 2026-07-13 · CVE-2026-46520

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An out of bounds heap write can occur when reading multiple images with different dimensions. A heap write is a memory corruption issue where data is written outside the boundaries of a pre-allocated memory buffer on the heap.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

BDU:2026-08508

CVE-2026-46520

ECHO-A791-A6E2-27DF

GHSA-36WM-HPRC-MCF5

OESA-2026-2386

OESA-2026-2387

OESA-2026-2388

OESA-2026-2389

OESA-2026-2463

OPENSUSE-SU-2026:11061-1

OPENSUSE-SU-2026:21071-1

SUSE-SU-2026:22378-1

SUSE-SU-2026:2580-1

SUSE-SU-2026:2877-1

Affected Products

Red Os

References · 161

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46520.json · Exploit
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-36wm-hprc-mcf5 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:32961 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46520 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46520 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45358 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-47165 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46521 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2387 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-47166 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45664 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2389 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-46520 · Vendor Advisory