- CVE-2026-33985: fix information leak in ClearCodec glyph index decode; validate nWidth*nHeight for overflow and update glyphEntry->count only after a successful realloc so subsequent reads cannot expose adjacent heap memory - CVE-2022-39283: fix missing length check in /video channel data handler; verify the stream contains cbSample bytes before using Stream_Pointer(), preventing decode of uninitialized data past the received payload - CVE-2022-39282: fix length handling in /parallel driver; zero-initialize the read buffer with calloc and return only the bytes actually read from the port, preventing leakage of uninitialized client memory to the server