BIT-PHP-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

BIT-PGBOUNCER-2026-6668 Integer overflow causes an infinite loop in packet buffer growth in PgBouncer

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all...

BIT-LIBPHP-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

BIT-LIBPHP-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

CLEANSTART-2024-PF68128 improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc

Security vulnerability affects the ffmpeg4 package. An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc...

CLEANSTART-2024-SY86592 Integer overflow in Mojo in Google Chrome prior to 98

Security vulnerability affects the chromium package. Integer overflow in Mojo in Google Chrome prior to 98...

CLEANSTART-2024-QV79984 WebPImage::decodeChunks integer overflow in Exiv2 through 0

Security vulnerability affects the exiv2 package. A WebPImage::decodeChunks integer overflow in Exiv2 through 0...

CLEANSTART-2024-EI35625 CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0

Security vulnerability affects the exiv2 package. A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0...

CLEANSTART-2024-IN78831 integer overflow in Exiv2 through 0

Security vulnerability affects the exiv2 package. An integer overflow in Exiv2 through 0...

CLEANSTART-2024-WC89015 integer overflow in Exiv2 through 0

Security vulnerability affects the exiv2 package. An integer overflow in Exiv2 through 0...

thrift: thrift: Denial of Service via infinite loop in D language bindings

A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...

thrift: thrift: Denial of Service via integer underflow in THeaderTransport

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

thrift: thrift: Denial of Service via buffer overflow in PHP bindings

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

RLSA-2026:74084 Critical: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory access in ANGLE CVE-2024-7532 chromium-browser:...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

CLEANSTART-2026-VL94606 integer overflow in util-linux through 2

Security vulnerability affects the util-linux package. An integer overflow in util-linux through 2...

CLEANSTART-2024-WK36293 Integer overflow vulnerability in pcre2test before 10

Security vulnerability affects the pcre2 package. Integer overflow vulnerability in pcre2test before 10...

Chromium CVE-2026-87643: Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-63209

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently...

SUSE CVE-2026-97906

In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...