CVE-2026-88365

The minimp3 library (commit ea99364f ) is vulnerable to an integer overflow within the mp3dec_skip_id3v1() function. This flaw occurs during the parsing of the APEv2 tag-size field . The vulnerability has a CRITICAL severity score of 9.8 , with potential impacts on confidentiality, integrity, and...

ROS-20260924-73-0065

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-88361

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88372: Integer Overflow or Wraparound

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

CVE-2026-93577: Integer Overflow or Wraparound

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

CVE-2026-88365: Integer Overflow or Wraparound

minimp3 commit ea99364f contains an integer overflow vulnerability in mp3decskipid3v1 when parsing the APEv2 tag-size field...

CVE-2026-97421: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ibumemfindbestpgsz Several corner cases, especially important on 32 bits: - umem-iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the...

CVE-2026-97451: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpiexopcode3A1T1R midop Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy...

CVE-2026-93828: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

CVE-2026-88351: Integer Overflow or Wraparound

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

PT-2026-98085

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ACPICA component within the acpi ex opcode 3A 1T 1R mid op function. The issue occurs when calculating the truncation length due to a lack of overflow...

PT-2026-98028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the exfat create upcase table function when the upcase table size is set to zero in the dentry, which can happen due to corrupted media or a misbehaving...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40652| An out-of-bounds read condition in the AMD Compressonator SDK could allow a local attacker to supply a specially crafted Truevision Graphics Adapter TGA file to a user or an...

PT-2026-97866

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.6.1 Description An integer overflow occurs in the EngineMupdf::BuildPageLabelRec function when the software parses PDF PageLabels /Nums entries. An integer overflow is a condition where an arithmetic operation attempts to...

EUVD-2026-86287

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88361: Integer Overflow or Wraparound

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88361

SumatraPDF version 3.6.1 is vulnerable to an integer overflow within the EngineMupdf::BuildPageLabelRec() function. This vulnerability occurs when the software parses PDF PageLabels /Nums entries . The technical details do not specify a direct exploitation path or specific remote impact beyond th...

Linux Distros Unpatched Vulnerability : CVE-2026-88350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc. CVE-2026-88350 Note that Nessus relies on the presence...

FreeBSD : Gitlab -- vulnerabilities (3f11e437-b7cd-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3f11e437-b7cd-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Double Free issue in Regular Expression Parser impacts GitLab CE/EE Integer...

Fedora 43 : 389-ds-base (2026-0b8bc362b1)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0b8bc362b1 advisory. - Resolves: rhbz2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...