agentprime: eclipse-foundation-eclipse-threadx-guixEvery new CVE for eclipse-foundation-eclipse-threadx-guix.https://agentprime.io/CVE-2026-91057: Out-of-bounds read when a multi-line text view string ends with a carriage returnhttps://agentprime.io/advisories/CVE-2026-91057/https://agentprime.io/advisories/CVE-2026-91057/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:01:30 GMTCVECVE-2026-92454: JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decodehttps://agentprime.io/advisories/CVE-2026-92454/https://agentprime.io/advisories/CVE-2026-92454/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:58:36 GMTCVECVE-2026-91059: JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation sizehttps://agentprime.io/advisories/CVE-2026-91059/https://agentprime.io/advisories/CVE-2026-91059/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:54:37 GMTCVECVE-2026-91189: GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or themehttps://agentprime.io/advisories/CVE-2026-91189/https://agentprime.io/advisories/CVE-2026-91189/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:53:44 GMTCVECVE-2026-92446: GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loaderhttps://agentprime.io/advisories/CVE-2026-92446/https://agentprime.io/advisories/CVE-2026-92446/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:52:45 GMTCVECVE-2026-92449: Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arenahttps://agentprime.io/advisories/CVE-2026-92449/https://agentprime.io/advisories/CVE-2026-92449/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:51:24 GMTCVECVE-2026-91186: PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-91186/https://agentprime.io/advisories/CVE-2026-91186/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:47:52 GMTCVE