CVE-2026-83601

A flaw was found in Netdata. An authenticated child agent can send an oversized DIMENSION SLOT value. This oversized value can lead to an integer overflow during memory allocation, causing a subsequent write operation to go beyond the allocated buffer. This out-of-bounds write can crash the paren...

OPENSUSE-SU-2026:21935-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

php: PHP: Archive entry injection via integer overflow in TAR parser

A flaw was found in PHP. An integer overflow vulnerability in the Phar extension occurs when parsing TAR archive headers containing excessively large size fields. An attacker can exploit this issue by supplying a specially crafted archive file to an application that processes TAR archives, causin...

CVE-2026-84449

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. An integer overflow can occur when processing extremely large RGB images, specifically during the calculation of image-plane strides. This overflow leads to an invalid memory access during the RGB-to-YCbCr color...

CVE-2026-84451

A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...

CVE-2026-84450

A flaw was found in libheif. A remote attacker could provide a specially crafted image file that, when processed by the libheif library, can lead to an integer overflow during crop calculations. This issue can cause assert-enabled builds to abort, resulting in a denial of service DoS. In release...

CVE-2026-81878

A flaw was found in radare2, a UNIX-like reverse engineering framework. The CPython bytecode .pyc marshal parser is vulnerable to an integer overflow. By opening or inspecting a specially crafted .pyc file, an attacker can trigger a heap out-of-bounds write. This can lead to heap memory corruptio...

pgbouncer: PgBouncer: Denial of Service via integer overflow in packet buffer growth

A flaw was found in PgBouncer. An unauthenticated remote attacker can exploit an integer overflow in the packet buffer growth logic by providing sufficiently large input. This causes the buffer size computation to overflow, leading to an infinite loop. As a result, a CPU core is saturated, and al...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in nanoid (CVE-2026-73086)

Summary A predictable unique ID generation vulnerability in the nanoid generator library CVE-2026-73086 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.3.17. Vulnerability Details CVEID:CVE-2026-73086 DESCRIPTION: nanoid is a secure,...

CVE-2026-61723

A flaw was found in FluidSynth. The native DLS parser, when processing ptbl chunks, does not properly validate the size calculation, leading to an integer overflow. A remote attacker could craft a malicious DLS file that, when processed, causes the application to attempt to allocate an excessive...

CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

CVE-2026-93314

A flaw was found in Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the segCnt argument within the FoFiTrueType::mapCodeToGID function. This could potentially lead to information disclosure, data corruption, or denial of service. Mitigation To mitigate...

CVE-2026-93313

A flaw was found in Poppler. This vulnerability, an integer overflow, occurs within the JBIG2Stream::readCodeTableSeg function when processing specially crafted JBIG2 image data. A remote attacker could exploit this by providing specially crafted input, which may lead to memory corruption. This...

CVE-2026-93311

A flaw was found in Freedesktop Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the BitsPerSample argument within the SampledFunction::SampledFunction function. This manipulation could lead to an integer overflow, potentially causing a denial of service...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

PT-2026-97360

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description An integer overflow occurs in src/topology/ctl.c when computing the combined topology element size using 32-bit arithmetic. This flaw allows bounds checks to be bypassed. By providing crafted...