72383 matches found
PT-2026-91912
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138: Integer Overflow or Wraparound
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
PT-2026-86300
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4 Description An integer overflow exists in the xmlURIEscapeStr function within the uri.c file. An integer overflow occurs when an arithmetic operation results in a value that exceeds the maximum size of the...
PT-2026-86304
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4 Description An inconsistency between xmlOutputWriteCallback and xmlBufUse in the xmlIO component allows negative lengths to reach write callbacks due to a missing integer overflow check before the writecallback...
PT-2026-91913
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
Linux Distros Unpatched Vulnerability : CVE-2026-86138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. CVE-2026-86138 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2026-86143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a...
CVE-2026-86138: Integer Overflow or Wraparound
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
Linux Distros Unpatched Vulnerability : CVE-2026-86139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. CVE-2026-86139 Note that Nessus relies on the presence of the package as reported by...
CVE-2026-86138: Integer Overflow or Wraparound
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
AZL-99636 CVE-2026-80909 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...
CVE-2026-80909
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...
CVE-2026-80908
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...
AZL-99603 CVE-2026-80887 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...
CVE-2026-80909 drm/amdgpu: Reject UVD message with invalid number of h265 refs
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...
CVE-2026-80909 drm/amdgpu: Reject UVD message with invalid number of h265 refs
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...
CVE-2026-80908
CVE-2026-80908 affects the Linux kernel drm/amdgpu subsystem. When a UVD (Unified Video Decoder) message with dimensions above 4096 is not rejected, it can trigger a potential overflow in DPB (Decoded Picture Buffer) size calculations . The fix, cherry-picked from upstream commit 05e1387d151f7156...
EUVD-2026-71667
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...