RedisBloom 2.8.23 CMSketch RDB Load Integer Overflow

RedisBloom versions 2.0.0 through 2.8.23 contain an integer overflow in CMSketch RDB loading. The proof of concept demonstrates a crafted serialized object triggering a Redis server crash. https://packetstorm.news/download/236998...

Bridging Number-Theoretic Primality Testing and Algorithmic Optimization: An Adaptive Cryptographic Framework

The security of modern public-key cryptographic systems, such as RSA, Diffie-Hellman, and ECC, depends entirely on the computational intractability of the integer factorization and discrete logarithm problems. For these asymmetric algorithms to operate, a core requirement is that the system must ...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142697 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpucspass1 The type of size is unsigned int, if size is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143098 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist...

CentOS Linux 6 [TuxCare] Security Update: gawk Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792508988)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792508988 advisory. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read...

RHEL 9 : expat (RHSA-2026:88247)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88247 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...

Oracle Linux 9 : php (ELSA-2026-87151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87151 advisory. - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire...

GitLab numeric error vulnerability

A numerical error vulnerability exists in GitLab CE/EE versions from 7.0 up to and including 18.11.13, in version 19.0 prior to 19.0.10, in version 19.1 prior to 19.1.9, in version 19.2 prior to 19.2.9, in version 19.3 prior to 19.3.6, in version 19.4 prior to 19.4.3, and in version 19.5 prior to...

PT-2026-121516

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A 32-bit integer wraparound occurs in the Windows-only Kerberos/SSPI authentication code. When an excessively long credential value is provided in the client connection configuration...

expat security update

2.7.3-63 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc 2.7.3-62 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XMLParseBuffer 2.7.3-61 - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribu...

Oracle Linux 10 : expat (ELSA-2026-88248)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88248 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

CentOS Linux 8.5 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792622946)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792622946 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

TencentOS Server 4: thrift (TSSA-2026:1170)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1170 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Oracle Linux 8 : php:7.4 (ELSA-2026-87080)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87080 advisory. - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address...

openSUSE 16 Security Update : aliyun-cli (openSUSE-SU-2026:22140-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22140-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-96641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not...

SUSE CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

SUSE CVE-2026-113681

OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read. Attackers can supply a crafted Cineon file with a huge declared width that wraps the size...

CLSA-2026-1792622946 corosync: Fix of 4 CVEs

CVE-2025-30472: stack buffer overflow in orftokenendianconvert - CVE-2026-35091: out-of-bounds read via checkmembcommittokensanity - CVE-2026-35092: integer overflow in checkmembjoinsanity - CVE-2026-81665: heap buffer overflow in totempgdeliverfn...