CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

EUVD-2026-107159

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

The VectorImage QML Type is vulnerable to a null-pointer dereference caused by an integer overflow . This issue can be triggered by processing a malicious SVG file, which leads to an impact on availability . No specific exploit details or remediation versions are provided in the documents.

BIT-PGBOUNCER-2026-107348 Integer overflow causes an infinite loop in message buffer growth in PgBouncer

Integer overflow in the message buffer growth logic mbufmakeroom in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow,...

CLSA-2026-1792571502 nginx: Fix of CVE-2026-97205

CVE-2026-97205: limit the number of pending operations per request so that the 8-bit r-main-blocked counter cannot overflow...

CVE-2026-111074

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

CVE-2026-111075

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

CVE-2026-114045

A flaw was found in FreeRDP. An integer wraparound in rdpsndserverselectformat DVIADPCM block-alignment arithmetic bypasses validation in the server-side rdpsnd channel. A malicious RDP client can send crafted SNDCFORMATS PDUs, causing an unbounded heap write during server audio playback that may...

CVE-2026-111075 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

CVE-2026-111075 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

CVE-2026-111075 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

CVE-2026-111075

In Eclipse OpenJ9 versions prior to 0.63.0 , a vulnerability exists in the JITServer component due to missing cross-field validation on _size, _paddingSize, and _dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can provide a crafted network paylo...

EUVD-2026-107138

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

K000163812: lz4 vulnerability CVE-2021-3520

Security Advisory Description There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact o...

CVE-2026-111074 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

EUVD-2026-107134

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

CVE-2026-111074

Eclipse OpenJ9 versions prior to 0.63.0 are vulnerable to a pre-authentication remote denial of service . The issue resides in the JITServer component where an integer overflow in MessageBuffer::computeRequiredCapacity() occurs when processing the initial 4-byte length field of an incoming TCP co...

CVE-2026-111074 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

CVE-2026-111074 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

Integer Truncation

io.netty, netty-codec-stomp is vulnerable to an integer truncation. The vulnerability is due to improper handling of a content-length header exceeding the maximum integer value, which allows a remote attacker to send a specially crafted STOMP frame, triggering an infinite decoding loop and...