[Git][security-tracker-team/security-tracker][master] Add another batch of LLM findings from one single author with no actionable entry

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cef685e4 by Salvatore Bonaccorso at 2026-10-16T07:14:17+02:00
Add another batch of LLM findings from one single author with no actionable entry

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -371,49 +371,49 @@ CVE-2026-111168 (LibreDesk before 2.9.0-rc.8 contains a stored cross-site script
 CVE-2026-111167 (GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vu ...)
 	- libredwg <itp> (bug #595191)
 CVE-2026-111166 (libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerabil ...)
-	TODO: check
+	- libmikmod <undetermined>
 CVE-2026-111165 (libmikmod through 3.3.15 contains a global out-of-bounds read vulnerab ...)
-	TODO: check
+	- libmikmod <undetermined>
 CVE-2026-111164 (UADE through 3.05 contains an out-of-bounds read vulnerability in uade ...)
-	TODO: check
+	NOT-FOR-US: UADE
 CVE-2026-111163 (WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- wildmidi <undetermined>
 CVE-2026-111162 (WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerabilit ...)
-	TODO: check
+	- wildmidi <undetermined>
 CVE-2026-111161 (libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-b ...)
-	TODO: check
+	NOT-FOR-US: libADLMIDI
 CVE-2026-111160 (LightLLM through 1.2.0 contains a denial of service vulnerability that ...)
 	NOT-FOR-US: LightLLM
 CVE-2026-111159 (libewf through 20260924 contains a heap out-of-bounds read vulnerabili ...)
-	TODO: check
+	- libewf <undetermined>
 CVE-2026-111158 (EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read v ...)
-	TODO: check
+	- libmseed <undetermined>
 CVE-2026-111157 (SoX through 14.4.2 contains a heap out-of-bounds write vulnerability i ...)
-	TODO: check
+	- sox <undetermined>
 CVE-2026-111156 (libTiMidity through 0.2.8 contains an out-of-bounds access vulnerabili ...)
-	TODO: check
+	- timidity <undetermined>
 CVE-2026-111155 (libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerabi ...)
-	TODO: check
+	- timidity <undetermined>
 CVE-2026-111154 (libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnera ...)
-	TODO: check
+	- timidity <undetermined>
 CVE-2026-111153 (Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds  ...)
-	TODO: check
+	- game-music-emu <undetermined>
 CVE-2026-111152 (Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds re ...)
-	TODO: check
+	- game-music-emu <undetermined>
 CVE-2026-111151 (OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerabili ...)
-	TODO: check
+	- openjph <undetermined>
 CVE-2026-111150 (ValleyBell libvgm through commit a6eed945 contains a heap out-of-bound ...)
-	TODO: check
+	NOT-FOR-US: ValleyBell libvgm
 CVE-2026-111149 (FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds ...)
-	TODO: check
+	NOT-FOR-US: FreeImage (danoli3 fork)
 CVE-2026-111148 (libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerab ...)
-	TODO: check
+	- libsidplayfp <undetermined>
 CVE-2026-111147 (Libyal libesedb through 20260704 contains a heap out-of-bounds read vu ...)
-	TODO: check
+	- libesedb <undetermined>
 CVE-2026-111146 (ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability i ...)
-	TODO: check
+	- libytnef <undetermined>
 CVE-2026-111145 (ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability i ...)
-	TODO: check
+	- libytnef <undetermined>
 CVE-2026-111144 (libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vu ...)
 	- libansilove <undetermined>
 CVE-2026-111143 (Ansilove libansilove through 1.4.2 contains an out-of-bounds read vuln ...)
@@ -431,7 +431,7 @@ CVE-2026-111138 (NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read v
 CVE-2026-111137 (libsmi through 0.5.0 contains an out-of-bounds write vulnerability in  ...)
 	- libsmi <undetermined>
 CVE-2026-111136 (libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnera ...)
-	TODO: check
+	- libinstpatch <undetermined>
 CVE-2026-111135 (libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ...)
 	- libfwsi <undetermined>
 CVE-2026-111134 (libfwsi through 20260522 contains a heap out-of-bounds read vulnerabil ...)
@@ -491,11 +491,11 @@ CVE-2026-110888 (Missing Authorization vulnerability in Meow Apps AI Engine ai-e
 CVE-2026-110878 (Aureus ERP through 1.6.0 contains a stored cross-site scripting vulner ...)
 	NOT-FOR-US: Aureus ERP
 CVE-2026-110877 (AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in ...)
-	TODO: check
+	- adplug <undetermined>
 CVE-2026-110876 (AdPlug through 2.4 contains an out-of-bounds read vulnerability in src ...)
-	TODO: check
+	- adplug <undetermined>
 CVE-2026-110875 (AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer ...)
-	TODO: check
+	- adplug <undetermined>
 CVE-2026-110874 (Dolibarr before 23.0.4 contains a PHP object injection vulnerability i ...)
 	NOT-FOR-US: Dolibarr
 CVE-2026-110812 (Deserialization of untrusted data in the Gremlin graph data import com ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cef685e4c53f0d51ce30f240b0f7961b89dc26ff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cef685e4c53f0d51ce30f240b0f7961b89dc26ff
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/7622164e/attachment.htm>