CyberSecBulletin

Fedora Project vulnerabilities

We track 2 vulnerabilities in Fedora Project products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Fedora Project vulnerabilities

  • 8.4 High severity

    GraphicsMagick: Out-of-bounds Write

    CVE-2026-77118GraphicsMagick Group

    A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated

  • 7.7 High severity

    Fedora Linux: Missing Authentication for Critical Functionality

    CVE-2025-1272Fedora Project

    The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF an