Medium: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This...

CVE-2026-65102: Integer Overflow or Wraparound

NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YAML configuration file. A successful exploit of this vulnerability might lead to denial of service, information disclosure, data tampering...

Security Bulletin: NVIDIA DeepStream - September 2026

NVIDIA has released a software update for NVIDIA® DeepStream. To protect your system, clone or update this software to version 9.1.0 or later from NVIDIA/DeepStream on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security...

PT-2026-102416

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description An integer overflow occurs in the DMARC Parser component within the file libopendmarc/opendmarc policy.c when processing the pct argument. This flaw allows for remote exploitation. Recommendations...

CVE-2026-102620: Integer Overflow or Wraparound

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95308): chromium -- security fixes

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

Ubuntu 24.04 LTS : libvirt vulnerabilities (USN-8831-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8831-1 advisory. It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

PT-2026-102619

NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YAML configuration file. A successful exploit of this vulnerability might lead to denial of service, information disclosure, data tampering...

ROS-20260929-73-0081

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-102929

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler versions prior to 26.09.0 Description An integer overflow occurs in the SplashClip::clipToPath function within the splash/SplashClip.cc file. This issue can be triggered from a local environment. Recommendations Upgrade to...

CVE-2026-71973: Integer Overflow or Wraparound

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CVE-2026-101279: Integer Overflow or Wraparound

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

PT-2026-102681

Name of the Vulnerable Software and Affected Versions libexpat versions 2.7.2 through 2.8.5 Description An integer overflow occurs in the expat realloc function on 32-bit platforms during the computation of allocation sizes. An attacker can exploit this by providing malicious XML to applications...

CVE-2026-102633: Integer Overflow or Wraparound

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or...

PT-2026-102740

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

CVE-2026-102621: Integer Overflow or Wraparound

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and migh...

CVE-2026-95308: Integer Overflow or Wraparound

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

ROS-20260929-73-0049

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260929-73-0110

The vulnerability of the wavefrontsendsample function in the sound subsystem of the Linux kernel lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...