CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

CVE-2026-93314

A flaw was found in Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the segCnt argument within the FoFiTrueType::mapCodeToGID function. This could potentially lead to information disclosure, data corruption, or denial of service. Mitigation To mitigate...

CVE-2026-93313

A flaw was found in Poppler. This vulnerability, an integer overflow, occurs within the JBIG2Stream::readCodeTableSeg function when processing specially crafted JBIG2 image data. A remote attacker could exploit this by providing specially crafted input, which may lead to memory corruption. This...

CVE-2026-93311

A flaw was found in Freedesktop Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the BitsPerSample argument within the SampledFunction::SampledFunction function. This manipulation could lead to an integer overflow, potentially causing a denial of service...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

CVE-2026-91789 Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...

PT-2026-97389

Name of the Vulnerable Software and Affected Versions PgBouncer versions prior to 1.25.3 Description An integer overflow exists in the packet buffer growth logic. When processing sufficiently large input, the buffer size computation overflows, causing a growth loop that cannot terminate. Since th...

CVE-2026-6668: Integer Overflow or Wraparound

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all...

ROS-20260923-73-0021

The vulnerability of the drmgemfbinitwithfuncs function in the drivers/gpu/drm/drmgemframebufferhelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploitation of this vulnerability could allow an...

Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3...

Linux Distros Unpatched Vulnerability : CVE-2026-91728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-96674: Integer Overflow or Wraparound

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...

PT-2026-97360

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description An integer overflow occurs in src/topology/ctl.c when computing the combined topology element size using 32-bit arithmetic. This flaw allows bounds checks to be bypassed. By providing crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-95308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memor...

CVE-2026-96611: Integer Overflow or Wraparound

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INTMAX to become negative. In readimagegrid, accumulating these value...

PT-2026-97338

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0 Description A signed integer overflow exists in libavformat/mov.c. In the mov read ispe function, uint32 t width and height values from a crafted HEIF ispe box are stored in signed int fields without bounds checkin...

Oracle Linux 8 : libtiff (ELSA-2026-69095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69095 advisory. 4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298 Tenable has extracted the preceding description block directly...

ROS-20260923-73-0063

The vulnerability of the amdgpucspass1 function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can all...

TencentOS Server 4: gegl04 (TSSA-2026:1027)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1027 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-97208

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an...