Vim: Heap Buffer Overflow when Loading a Spell File

...

Vim: Heap Buffer Overflow in Text Property Handling

...

SUSE CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-74341: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte halbuf without validating the response length. A response exceeding...

CVE-2026-74404: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snpfilterreservedmemregions off-by-one Sashiko notes: regarding the bounds check in snpfilterreservedmemregions called via walkiomemresdesc: does the check if rangelist-numelements 16 + 8 PAGESIZE allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-74452

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the...

Fedora 45 : libxls (2026-914d7851ae)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-914d7851ae advisory. Automatic update for libxls-1.6.3-9.fc45. Changelog Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824...

CVE-2026-74452: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...

PT-2026-72904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the panthor fw load section entry function where the data size to be copied is calculated without validation against the allocated section size. A crafted firmware cou...

PT-2026-72890

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.652 Description On 32-bit Perl builds, an integer wraparound occurs in the output buffer size calculation within the preparse function. The buffer is reserved using newSVstrlenstatement 7 + 16, where the product is...

CVE-2026-72415: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in geputenumdouble geputenumdouble passes the user-supplied enumeration index item0 to sndsocenumitemtoval without checking it against the number of items in the enum: ret =...

Linux Distros Unpatched Vulnerability : CVE-2026-74378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe getsrqwqe reads wqe-dma.numsge from the shared receive queue buffer, which is mapped into userspace. It validate...

Linux Distros Unpatched Vulnerability : CVE-2026-73193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse...

openSUSE 16: ffmpeg-7 / ffmpeg-7-libavcodec-devel / ffmpeg-7-libavdevice-devel / etc (openSUSE-SU-2026:21572-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21572-1 advisory. - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec...

SUSE CVE-2026-14669

Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

SUSE CVE-2026-14670

Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

SUSE CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

SUSE CVE-2026-19385

Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

GO-2026-5466 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-19694

A flaw was found in the TTX Logger file parser in Wireshark. This issue occurs when malformed packets are decoded from a packet capture file, causing a heap-based buffer overflow, resulting in a denial of service. Mitigation To mitigate this vulnerability, do not open untrusted capture files...