4406 matches found
Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11378)
Summary IBM MQ has addressed an integer overflow vulnerability in the queue manager's object descriptor conversion that could allow a remote authenticated attacker to write zeros to arbitrary heap memory locations, leading to remote code execution. Vulnerability Details CVEID:CVE-2026-11378...
SUSE-SU-2026:23831-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ss...
SUSE-SU-2026:23729-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...
SUSE-SU-2026:23708-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...
Important: emacs
Issue Overview: GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel...
CVE-2026-54334: Out-of-bounds Write
UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen in uefifirmware/compression/Tiano/Decompress.c reads Number from GetBitsSd, CBIT with CBIT = 9 and can obtain 511 entries for the 510-element Sd-mCLen heap...
CVE-2026-15892
The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...
CVE-2026-15892 Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service
The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...
CVE-2026-15892 Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service
The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...
CVE-2026-15892 Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service
The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...
PT-2026-90984
Name of the Vulnerable Software and Affected Versions mcumgr affected versions not specified Description A memory leak occurs in the SMP settings-management group handlers settings mgmt read, settings mgmt write, and settings mgmt delete within subsys/mgmt/mcumgr/grp/settings mgmt/src/settings...
DEBIAN-CVE-2026-90557
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...
CVE-2026-90557 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...
Linux Distros Unpatched Vulnerability : CVE-2026-22590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6,...
CVE-2026-90557: Out-of-bounds Read
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...
Linux Distros Unpatched Vulnerability : CVE-2026-90557
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity...
PT-2026-90717
Name of the Vulnerable Software and Affected Versions Freeciv versions 3.1.0 through 3.2.5 Description An out-of-bounds read occurs in the sg load player unit function when processing savegame files containing invalid unit activity indices. A malicious savegame file with an out-of-range activity...
SUSE-SU-2026:4125-1 Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276733. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation...
CVE-2026-88914
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...
DEBIAN-CVE-2026-88914
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...