EUVD-2026-60015

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

CVE-2026-19967

The CVE concerns Open Asset Import Library (Assimp) with a heap-based buffer overflow in the File Parser subsystem. Affected is the function Assimp::Compression::decompressBlock in code/Common/Compression.cpp. Described impact indicates remote initiation is possible, with the exploit publicly rel...

CVE-2026-67967

Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...

PT-2026-76750

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

389-ds:1.4 security update

1.4.3.39-26 - Bump version to 1.4.3.39-26 - Resolves: RHEL-183073 - EMBARGOED CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-8.10.z - Resolves: RHEL-190782 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref contro...

CVE-2026-39255

A buffer overflow in SteelSeries GG v107.0.0 for macOS, located in the libSSEdevice.dylib library's dup_wcs function, allows an unauthenticated remote attacker to execute arbitrary code. CVSS 9.8 (Critical); no patch or exploit code is mentioned in the provided documents.

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100522)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100522 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accept...

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer over-read in...

unbound security update

1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099496 advisory. Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099534 advisory. Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte...

The vulnerability in the `net/bluetooth/l2cap_core.c` component of the Linux operating system allows a hacker to gain access to confidential data and compromise its integrity.

The vulnerability of the net/bluetooth/l2capcore.c component in the Linux operating system is related to incorrect checking of the data size at the input stage. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability in the driver/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ec_bhf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ecbhf component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100528)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100528 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual...

RHEL 10 : 389-ds-base (RHSA-2026:55425)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55425 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

The vulnerability of APEI/GHES components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of APEI/GHES components in Linux operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rtl8xxxu_probe() function in the drivers/net/wireless/realtek/rtl8xxxu/core.c driver for Realtek wireless adapter drivers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rtl8xxxuprobe function in the drivers/net/wireless/realtek/rtl8xxxu/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remot...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100521 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...