PT-2026-108290

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.7.0.22298 Description In the src/MobiDoc.cpp file, the untrusted unsigned mobiHdr.hdrLen field is narrowed to a signed integer during validation. This allows values exceeding INT MAX to be treated as negative, bypassing th...

ROS-20261008-73-0299

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2026-108291

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.7.0.22298 Description An issue exists in the LitParseHeader function within src/LitDoc.cpp where the calculation of the section offset using hdrLen and nPieces is performed with signed 32-bit arithmetic without proper...

UBUNTU-CVE-2026-106064

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...

UBUNTU-CVE-2026-106066

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-107730: Integer Overflow or Wraparound

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

CVE-2026-107324: Integer Overflow or Wraparound

An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process,...

CVE-2026-107446: Integer Overflow or Wraparound

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

ROS-20261008-73-0207

The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261008-73-0028

The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : poppler vulnerabilities (USN-8894-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8894-1 advisory. It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to...

Fedora 43 : chromium (2026-02902c2fa0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-02902c2fa0 advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...

EulerOS 2.0 SP15 : haproxy (EulerOS-SA-2026-3914)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP15 : wget (EulerOS-SA-2026-4024)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within...

PT-2026-107792

containerd overlaybd through 1.0.18 has a do load index LSMT index loading integer overflow and resultant out-of-bounds heap access for index bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:4554-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4554-1 advisory. This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in...

SUSE SLES16 Security Update : rustup (SUSE-SU-2026:24014-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24014-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-3974)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse.CVE-2026-56406 libexpat befo...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22023-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22023-1 advisory. Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization ...

EulerOS 2.0 SP15 : wget (EulerOS-SA-2026-3958)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within...