Known Vulnerabilities for Chroma by Chroma-core
Listed below are 6 of the newest known vulnerabilities associated with "Chroma" by "Chroma-core".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85664 json | Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in colle... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85090 json | FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during AVC444... | Not Provided | 2026-09-03 | 2026-09-05 |
| CVE-2026-77118 json | A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffm... | Not Provided | 2026-08-20 | 2026-08-26 |
| CVE-2026-65706 json | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows at... | Not Provided | 2026-07-23 | 2026-07-28 |
| CVE-2026-32740 json | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) ... | Not Provided | 2026-05-19 | 2026-07-15 |
| CVE-2026-13444 json | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating the... | Not Provided | 2026-07-30 | 2026-07-30 |