CVE-2026-72854 msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854

msgpack-c (C MessagePack library) is affected by an integer overflow in msgpack_unpacker_expand_buffer (src/unpack.c), reachable via the public msgpack_unpacker_reserve_buffer API. The doubling loop guards its multiplication against overflow, but the addition in the loop condition is unguarded , ...

CVE-2026-73255 Mongoose: Path traversal in SSI #include directives enables arbitrary file read

Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI-enabled file can place directory traversal sequences in an include file or include virtual directive. The mgssi function in src/ssi.c concatenates the directive argument into a filesystem pat...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

[SECURITY] Fedora 43 Update: libgit2-1.9.7-1.fc43

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

MINI-Q6XP-J8G3-H29W

Bulletin has no description...

MINI-FRV4-VMJ5-CCXP

Bulletin has no description...

OESA-2026-3426 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

CVE-2026-24401 vulnerabilities

Vulnerabilities for packages: avahi...

Joern 4.0.607

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Fedora 45 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-67365d8467)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-67365d8467 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

CVE-2026-72854: Integer Overflow or Wraparound

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

PT-2026-79110

Name of the Vulnerable Software and Affected Versions msgpack-c affected versions not specified Description An integer overflow occurs in the msgpack unpacker expand buffer function within src/unpack.c, which is accessible via the msgpack unpacker reserve buffer API. The function calculates the n...

Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

MINI-M3MV-CJRM-PJPF

Bulletin has no description...

MINI-CVG8-GH2V-JRR5

Bulletin has no description...

CVE-2026-75147

FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a sequence header OBU advanced its pointer and remaining-size counter by the encoded header length plus the OBU payload size without first...

CVE-2026-75147 FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c

FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a sequence header OBU advanced its pointer and remaining-size counter by the encoded header length plus the OBU payload size without first...

CVE-2026-75145 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

CVE-2026-75145 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...