92006 matches found
CVE-2026-74755
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
CVE-2026-56386
Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...
CLSA-2026-1792238729 gstreamer1-plugins-good: Fix of 4 CVEs
CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...
CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
EUVD-2026-107180
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service
An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...
CVE-2026-74755
Apache bRPC (versions
CVE-2026-56386 Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...
CVE-2026-56386
The Apache bRPC HTTP/2 server DATA frame parser is vulnerable to an integer underflow and out-of-bounds read . The issue arises because the handler decrements the fragment size when the PADDED flag is set before verifying the presence of the mandatory pad length byte. An unauthenticated remote at...
EUVD-2026-107172
Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...
CVE-2026-56386 Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...
Compress/s2: Integer Overflow Or Wraparound And Out-of-bounds Write In Compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in "s2.NewDict" allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding "MaxInt64". When "Dict.Encode" is subsequently called, the overflowed...
CLSA-2026-1791800936 kernel: Fix of 191 CVEs
drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check CVE-2026-89818 - drm/amdgpu/vcn4: Avoid overflow on msg bound check CVE-2026-46199 - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg CVE-2026-46199 - drm/amdgpu/vcn3: Avoid overflow on msg bound check CVE-2026-46230 -...
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
DEBIAN-CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
UBUNTU-CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
Security update for poppler
This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts...
CVE-2026-112059
A flaw was found in liblas. By convincing a user to process a specially crafted LAS file containing an oversized schema record, an attacker can trigger an integer truncation issue during memory allocation. This flaw leads to a heap-based buffer overflow, causing an application crash or memory...
