EUVD-2026-76849

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

CVE-2026-90473

msgpack-java through 0.9.12 is affected by an integer overflow in MessageUnpacker.skipValue() when processing MAP32 containers. An attacker can supply a MAP32 element count of 0x40000000 or greater , which wraps when doubled, causing the parser cursor to desynchronize so that attacker-controlled ...

Exploit for Out-of-bounds Write in F5 Nginx

CVE-2013-2028 Exploit Vulnerability Details Vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-90473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts...

Linux Distros Unpatched Vulnerability : CVE-2026-89513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENTGETINFO stores guest-controlled numevents sizeofeinfo in a 32-bit integer. On RV64, numevents =...

Linux Distros Unpatched Vulnerability : CVE-2026-89592

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: fix NULL dereference and integer overflow in rocketjobpush rocketjobpush allocates a temporary array to hold all input and output GEM object...

CVE-2026-90473: Integer Overflow or Wraparound

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

PT-2026-90636

Name of the Vulnerable Software and Affected Versions msgpack-java versions prior to 0.9.13 Description An integer overflow occurs in the MessageUnpacker.skipValue function when processing MAP32 containers with large element counts. By providing a MAP32 element count of 0x40000000 or higher, the...

Linux Distros Unpatched Vulnerability : CVE-2026-89559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area...

Linux Distros Unpatched Vulnerability : CVE-2026-89557

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblock...

Linux Distros Unpatched Vulnerability : CVE-2026-89541

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: harden gssunwrapresppriv length checks gssunwrapresppriv validates the RPCSECGSS opaque length with offset = u8 p - u8 head-iovbase; if offset +...

CVE-2026-54240

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-89541

A flaw was found in the Linux kernel. Specifically, an integer overflow vulnerability exists in the gssunwrapresppriv function within the SUNRPC component. This flaw occurs when validating the length of RPCSECGSS opaque data. A malicious krb5p Network File System NFS server can send a specially...

CVE-2026-89513

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for RISC-V architectures. A malicious guest operating system could exploit an integer overflow vulnerability by providing a crafted number of Performance Monitoring Unit PMU events during the SBI PMU EVENTGETINFO...

CVE-2026-89592

A flaw was found in the accel/rocket component of the Linux kernel. This vulnerability arises from two issues: a missing null check after a memory allocation failure and an integer overflow when calculating memory requirements based on user-supplied values. An attacker could exploit these flaws t...

CVE-2026-89612

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could provide a specially crafted NTFS boot sector containing an invalid Master File Table MFT Logical Cluster Number LCN. Due to an integer overflow during parsing, this could lead to an out-of-bounds memory access...

CVE-2026-89559

A flaw was found in the Linux kernel's libnvdimm/labels component. An integer overflow vulnerability exists in the ndlabelvalidate function, where a 32-bit calculation of a namespace index field nslot can wrap around. This allows a local attacker, or an attacker with control over the storage...

CVE-2026-89557

A flaw was found in the Linux kernel's Multiple Device md driver. A local attacker with control over a malicious disk image could provide a specially crafted on-disk superblock with an invalid 'bblogshift' value. This invalid value can lead to an integer overflow when processing bad block...