CVE-2026-112010 smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-112010 smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-112010

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-112010 smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

EUVD-2026-103463

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-112010

The smpeg library (versions through 2.0.0 ) is vulnerable to an integer underflow in the stream_header() function within MPEGsystem.cpp. An attacker can supply a crafted MPEG file via SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data to wrap the packet_size by declaring an undersized packet length. T...

CVE-2026-112010

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-98621: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gueremcsum passes them to skbremcsumprocess, whose partial path stores offset - start in the u16...

CVE-2026-112010: Integer Underflow (Wrap or Wraparound)

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

PT-2026-116840

In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum field offset. gue remcsum passes them to skb remcsum process, whose partial path stores offset - start in the u16 skb-csu...

PT-2026-116810

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bounds check for skb-backed dynptrs The skb pointer if linear function checks whether a memory region of length len starting at offset off into the skb is in the linear area, and returns a pointer to the region if so. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-98705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: account proxy paths against the mesh path limit Proxy-path churn can drive the interface path counter negative and let later mesh path additions...

PT-2026-116614

smpeg through 2.0.0 contains an integer underflow vulnerability in stream header in MPEGsystem.cpp that allows attackers to wrap packet size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG new, SMPEG new rwops or SMPEG new data to trigger a...

DEBIAN-CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881 FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

EUVD-2026-103337

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881 FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881 FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...