55820 matches found
gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...
Microweber <1.2.12 - Integer Overflow
Microweber before 1.2.12 is susceptible to integer overflow. The application allows large characters to insert in the input field 'first & last name,' which can allow an attacker to cause a denial of service via a crafted HTTP request. id: CVE-2022-0968 info: name: Microweber 1.2.12 - Integer...
EUVD-2026-52079
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...
CVE-2026-20464
Summary: CVE-2026-20464 affects the hevc decoder. An out-of-bounds write caused by an integer overflow could allow remote escalation of privilege to System level without user interaction. The issue is tied to the patch ALPS11104718 and Issue MSV-8297. Details from sources: The vulnerability is de...
EUVD-2026-52054
In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...
CVE-2026-68580
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...
CVE-2026-68580 FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...
CVE-2026-68580
FreeRDP contains an integer overflow in the audio input redirection channel (audin) for versions before 3.29.0, affecting ALSA, sndio, WinMM, and OpenSL ES backends. A malicious FramesPerPacket value from the RDP server can cause allocation size wraparound, leading to a heap-based buffer overflow...
Security Bulletin: IBM Storage Protect Server is susceptible to vulnerabilities due to Golang library related to ObjectAgent(CVE-2026-39824).
Summary Golang library is used by the IBM Storage Protect Server OSSM and ObjectAgent component. Golang is affected by multiple vulnerabilities that may cause data integrity issues, or memory handling problems when processing specially crafted input. This bulletin identifies the steps to address...
CVE-2026-65423
A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to trigger an out-of-bounds write. This could lead to arbitrary code execution or a denial of service DoS...
CVE-2026-63559
A flaw was found in open62541. An integer overflow in the UAVariant arrayDimensions product computation may allow a remote attacker to read memory outside of its allocated bounds. This could potentially lead to the disclosure of sensitive information...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for July 2026
Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.0 IF001 Vulnerability Details CVEID:CVE-2026-41602 DESCRIPTION: Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. User...
SUSE CVE-2026-17705
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-17726
Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
EUVD-2026-51335
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
DEBIAN-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-17705
An integer overflow flaw was found in the libxml component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519665978...