72395 matches found
fastrpc_get_args() function Heap Buffer Overflow
The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux kernel DMA Length Buffer Overflow DoS
The vulnerability of the dmalength function in the drivers/accel/ethosu/ethosugem.c module of the Linux kernel’s acceleration device driver lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106190)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106190 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106170)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106170 advisory. FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memo...
rtw_is_desired_network Heap Buffer Overflow DoS
The vulnerability of the rtwisdesirednetwork function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the exploitation of integer overflows. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...
Linux kernel module IVPU IPC Buffer Overflow DoS
The vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
ImageMagick Integer Overflow DoS
The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
MongoDB Integer Overflow
The vulnerability of the MongoDB database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-81666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was found in Corosync's handling of membership commit token messages. The length- validation check for these messages can be bypassed on...
MiracleLinux 8 : gimp:2.8 (AXSA:2026-1773:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1773:01 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflo...
AlmaLinux 9 : gegl04 (ALSA-2026:62170)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:62170 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fro...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106157)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106157 advisory. FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c that...
Linux Distros Unpatched Vulnerability : CVE-2026-80908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit...
PT-2026-86199
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential overflow exists in the DPB size calculations within the drm/amdgpu component. This occurs when processing UVD messages with dimensions exceeding 4096. Recommendations At the...
MiracleLinux 9 : gimp-3.0.4-4.el9_8.10 (AXSA:2026-1755:10)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1755:10 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF fil...
perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the JSON parsing process. An attacker can cause the application to terminate unexpectedly by supplying a specially crafted large JSON input, leading to memory corruption and potential denial of service...
CVE-2026-48486
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...
USN-8724-1 librabbitmq vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
CVE-2026-48486 Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflation
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...