Sezero
Sezero Security Releases - October 2026
sezero-2026-10 Oct 1, 2026 Source: Vendor
Sezero security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-111154
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-111154
BR2026-0000-032834
libtimidity
unclaimed
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. At...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-111155
BR2026-0000-032835
libtimidity
unclaimed
libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. ...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-111156
BR2026-0000-032836
libtimidity
unclaimed
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-111165
BR2026-0000-032848
libmikmod
unclaimed
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted ....
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-111166
BR2026-0000-032849
libmikmod
unclaimed
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers...
Credited as HaiND from the Post and Telecommunication Institute of Technology