Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the parsing of rnr...

PT-2026-91604

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 macOS versions prior to Sequoia 15.8 macOS versions prior to Tahoe 26.7 Description An integer overflow occurs due to insufficient input validation. Connecting to a malicious NFS server can lead to...

CVE-2026-43788: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

PT-2026-91566

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to...

CVE-2026-84554: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to cause a denial-of-service...

PT-2026-91502

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description An integer overflow occurs due to insufficient input validation. Processing a maliciously crafted file can result in a denial-of-service or the potential disclosure of memory contents. An...

PT-2026-91215

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Red Hat Enterprise Linux affected versions not specified Description A flaw exists in the ICO file loader. When processing an ICO file that contains an embedded PNG image, an integer overflow can occur duri...

Important: gimp

Issue Overview: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-90948: Out-of-bounds Write

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

CVE-2026-84544: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-90948: Out-of-bounds Write

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

Amazon Linux 2 : nerdctl (ALAS-2026-3903)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...

Amazon Linux 2 : libvirt (ALAS-2026-3910)

The version of libvirt installed on the remote host is prior to 4.5.0-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3910 advisory. A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RP...

Amazon Linux 2023 : expat, expat-devel, expat-static (ALAS2023-2026-2157)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2157 advisory. libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy violatio...

Important: expat

Issue Overview: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, CVE-2026-50219 libexpat before 2.8.2 lacks handler...

CVE-2026-90596

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

CVE-2026-90593

A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::drawsubimage of the file src/image/imageraw.rs. Executing a manipulation of the argument width can lead to integer overflow. The attack may be launched remotely. The project was informed of the...

CVE-2026-90596 embedded-graphics image_raw.rs new/bytes_per_row integer overflow

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

CVE-2026-90596

embedded-graphics (Rust library) up to 0.8.2 is affected by an integer overflow in the ImageRaw::new/bytes_per_row function (src/image/image_raw.rs) on 32-bit platforms. The flaw can be triggered remotely without authentication or user interaction. Per CVSS 3.1, the impact is rated MEDIUM (6.5) w...

CVE-2026-90596 embedded-graphics image_raw.rs new/bytes_per_row integer overflow

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...