firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Layout: Text and Fonts component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Layout: Text and Fonts component...

CLSA-2026-1792983235 Fix of 56 CVEs

CVE-2026-98706 - wifi: mac80211: drain PS delivery work during station teardown CVE-2026-98706 CVE-2026-98836 - ALSA: line6: reject oversized playback packets CVE-2026-98836 CVE-2026-98548 - sctp: discard the rest of the packet on a stale-cookie error CVE-2026-98548 CVE-2026-98614 - sctp: avoid...

CLSA-2026-1792980237 Fix of 276 CVEs

CVE-2022-49416 - wifi: mac80211: fix use-after-free in chanctx code CVE-2022-49416 CVE-2022-49685 - iio: trigger: sysfs: fix use-after-free on remove CVE-2022-49685 CVE-2021-47670 - can: peakusb: fix use after free bugs CVE-2021-47670 CVE-2026-98706 - wifi: mac80211: drain PS delivery work during...

CLSA-2026-1792979087 kernel: Fix of 118 CVEs

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...

CLSA-2026-1792977831 kernel: Fix of 118 CVEs

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...

PT-2026-125473

Name of the Vulnerable Software and Affected Versions FLTK versions prior to 1.4.6 Description An integer overflow occurs in the load bmp function. This issue allows an attacker to provide a specially crafted BMP or ICO file with large dimensions, leading to an undersized pixel buffer allocation...

PT-2026-123304

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parse integer/2 in...

Apple Security Advisory 10-26-2026-7

Apple Security Advisory 10-26-2026-7 - tvOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, buffer overflow, integer overflow, and information disclosure vulnerabilities...

CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792791338)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792791338 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9,...

Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

PT-2026-125249

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

PT-2026-125261

An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, macOS Sequoia versions prior to 15.8.2, and macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an integer overflow and may lead to a denial of service when connecting to a malicious VNC server...

PT-2026-125393

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-106676

The qiujie mall-server 0.0.1-SNAPSHOT software contains an integer overflow vulnerability within the CartServiceImpl component. This flaw allows an authenticated user to manipulate a cart quantity into a negative value. Because the order creation flow fails to validate the resulting quantity, it ...

PT-2026-125152

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

PT-2026-125133

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc (CENTOS7:CLSA-2026:1792785441)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792785441 advisory. - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when...

ALSA-2026:89830 Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...