cwe-125 2

• No Password, No Association, No Fix: Four Bugs in the Wi-Fi Daemon SteamOS Ships by Default Aug 1, 2026
• A 992-Byte PDF That Crashes Poppler (and an lcms2 Bug That Also Hits OpenJDK and Friends) Apr 17, 2026