Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities

Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION:...

ROS-20260922-73-0010

The vulnerability in gstreamer1-plugins-good is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-84848

An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc...

PT-2026-96892

Name of the Vulnerable Software and Affected Versions RTI Connext Professional Core Libraries versions 6.1.0 through 6.1.x RTI Connext Professional Core Libraries versions 7.0.0 through 7.3.1.5 RTI Connext Professional Core Libraries versions 7.4.0 through 7.7.0 Description An integer overflow or...

CVE-2026-88350: Integer Overflow or Wraparound

An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc...

CVE-2026-81878: Integer Overflow or Wraparound

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

CVE-2026-18462: Integer Overflow or Wraparound

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional Core Libraries allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1...

CVE-2026-83601: Integer Overflow or Wraparound

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ullencoded passes to pluginsdrrddimputtoslot in src/plugins.d/pluginsdinternals.h without an upper bound. prdarraycreate in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002130 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

CVE-2026-88350

An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc...

ROS-20260922-73-0013

A vulnerability in the WAV parser of the GStreamer multimedia framework allows for integer overflow when processing improperly formatted WAV files. This vulnerability enables a malicious actor to cause the application to terminate abnormally service failure...

ROS-20260922-73-0008

The vulnerability in gstreamer1-plugins-bad-free is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-96962

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which can lead to an application denial-of-service. An attacker can cause the application to crash by inducing a victim to visi...

CVE-2026-88350

An integer overflow vulnerability exists in MPack version 1.1.1 within the functions mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). The vulnerability is associated with CWE-190 . According to the provided documentation, some Linux distributions may have packages impacted by this vulner...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: protobuf-c (UTSA-2023-001305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001305 advisory. protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002131 advisory. addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002721 advisory. Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Tenable has extracted the preceding description block directly from the Unity Linux...

PT-2026-96666

Name of the Vulnerable Software and Affected Versions Net::IDN::Punycode versions prior to 2.590 Description An out-of-bounds read occurs in the XS backend due to an integer overflow of the delta accumulator within the encode punycode function. The XS backend stores the punycode delta and the...

CVE-2026-74765: Integer Overflow or Wraparound

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. The XS backend keeps the punycode delta, and the digit index derived from it, in a signed int. The accumulation delta += m-n h+1 has no overflow check, so...

Linux Distros Unpatched Vulnerability : CVE-2026-74765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. The XS backend...