The vulnerability of the `__unset_online()` function in the drivers/s390/cio/css.c module of the S390 platform’s Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unsetonline function in the drivers/s390/cio/css.c module of the S390 platform driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dlm_posix_lock() function in the fs/dlm/plock.c module exposes the support for Linux’s distributed locking mechanism in kernel-level locking. This allows an attacker to gain access to protected information or cause service failures.

The vulnerability of the dlmposixlock function in the fs/dlm/plock.c module, which supports Linux kernel-based distributed locking mechanisms, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerabilities of the functions rsm_load_state_32() and rsm_load_state_64() in the arch/x86/kvm/emulate.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allow an attacker to gain access to protected information or cause service failures.

The vulnerability of the rsmloadstate32 and rsmloadstate64 functions in the arch/x86/kvm/emulate.c module of the virtualization subsystem on the Linux x86 kernel platform is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain acce...

The vulnerability of the __mdiobus_register() function in the drivers/net/phy/mdio_bus.c module of the Linux physical layer network driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mdiobusregister function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network driver kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

...

SUSE CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

The vulnerability of the osnoise_cpus_write() function in the kernel/trace/trace_osnoise.c module, which supports Linux kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the osnoisecpuswrite function in the kernel/trace/traceosnoise.c module, which supports kernel tracing in Linux operating systems, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cs35l41_volatile_reg() function in the include/sound/cs35l41.h module of the Linux kernel allows a hacker to access protected information or cause a service failure.

The vulnerability of the cs35l41volatilereg function in the include/sound/cs35l41.h module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the ath9k_rx_prepare() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the ath9krxprepare function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker...

The vulnerability of the mpi3mr_get_all_tgt_info() function in the drivers/scsi/mpi3mr/mpi3mr_app.c file of the Linux operating system’s SCSI device driver module allows a hacker to cause a service failure.

The vulnerability of the mpi3mrgetalltgtinfo function in the drivers/scsi/mpi3mr/mpi3mrapp.c file of the Linux SCSI device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fpu_alloc_guest_fpstate() function in the arch/x86/kernel/fpu/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the fpuallocguestfpstate function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s kernel support for x86 platforms is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the module include/uapi/linux/capability.h of the Linux operating system allows a perpetrator to gain access to protected information or cause a service failure.

The vulnerability in the include/uapi/linux/capability.h module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the acpi_cppc_processor_probe() function in the drivers/acpi/cppc_acpi.c driver module of the ACPI support driver for the Linux kernel allows a malicious actor to access protected information or cause system failures.

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

JLSEC-2026-7 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG...

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function pngimagefinishread when processing interlaced 16-bit PNGs with...

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

DEBIAN-CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

CVE-2026-32647

Summary: NGINX Open Source and NGNIX Plus may be affected when built with the ngx_http_mp4_module and using the mp4 directive. The issue is a vulnerability in the module that can trigger a buffer over-read or over-write in the worker memory, potentially terminating the worker or enabling code exe...

CVE-2026-32647 NGINX ngx_http_mp4_module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

CVE-2026-32647 NGINX ngx_http_mp4_module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...