CVE-2026-92158

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FpySequencer STORE directive stack write validation. Prior to version 4.2.0 , the bounds check fails to account for integer wraparound when adding attacker-c...

CVE-2026-92158 F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive stack write validation the bounds check adds attacker-controlled offset and size before memcpy, allowing integer wraparound ...

CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...

CVE-2026-92157

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FileDownlink SendPartial range validation prior to version 4.3.0 . The root cause is unchecked arithmetic where startOffset plus length can wrap around, resu...

CVE-2026-102036 Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service

An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes...

CVE-2026-102036

An Integer Overflow or Wraparound vulnerability exists in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows a configured EVPN BGP peer to trigger a denial of service (DoS) through EVPN Type-2 MAC/IP routes . No specific exploit details or remediation steps are...

EUVD-2026-101361

An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes...

EUVD-2026-101349

An Integer Overflow or Wraparound vulnerability in the routing daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled...

EUVD-2026-101323

An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing...

CVE-2026-101945

An Integer Overflow or Wraparound vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . A remote attacker with an established EVPN BGP peering relationship can exploit this flaw during EVPN BGP route processing to cause a denial of service . This issue specif...

EUVD-2026-101322

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer...

CVE-2026-101944

Juniper Networks Junos OS and Junos OS Evolved are affected by an Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) . An attacker can cause a denial of service by sending specially crafted EVPN route updates from an accepted EVPN BGP peer . Exploitation details and...

CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-49206

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-49206

The rapidcsv C++ CSV parser library is vulnerable to an integer overflow in the RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames functions. The root cause is the conversion of size_t indexes to int before being added to std::vector iterators. On 64-bit systems, dimensions exce...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2024-43091: Out o...