CVE-2026-3442 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-4647 vulnerabilities

Vulnerabilities for packages: binutils...

PT-2026-79140

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vips image sanity. The resulting buffer-region...

PT-2026-79170

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow allows a local attacker to execute arbitrary code. An integer underflow occurs when an arithmetic operation results in a value smaller than t...

UBUNTU-CVE-2026-75145

FFmpeg before commit b4c199c contains an incorrect integer narrowing c...

AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:56966)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:56966 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 gstreamer1-plugins-good:...

UBUNTU-CVE-2026-63633

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

PT-2026-79110

msgpack unpacker expand buffer in src/unpack.c, reached through the public msgpack unpacker reserve buffer API, computes its new buffer size using an unchecked size t addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but...

PT-2026-79243

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow allows a remote attacker to cause a denial of service and potentially disclose sensitive information. An integer underflow occurs when an arithmetic...

PT-2026-79209

Name of the Vulnerable Software and Affected Versions Azure Data Manager for Energy affected versions not specified Description An integer overflow or wraparound occurs in Azure Data Manager for Energy, which allows an authorized attacker to execute code over a network. An integer overflow is a...

Linux Distros Unpatched Vulnerability : CVE-2026-75145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long...

RockyLinux 8 : gstreamer1-plugins-good (RLSA-2026:56966)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56966 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 gstreamer1-plugins-good:...

Linux Distros Unpatched Vulnerability : CVE-2026-65610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can...

PT-2026-78914

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description An unprivileged local user can exploit an integer overflow in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, resulting in an undersized memory buffe...

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of the levenshtein() and levenshtein_less_equal() functions, which are extensions to the fuzzystrmatch function in the PostgreSQL database management system, allow attackers to execute arbitrary code.

The vulnerabilities of the levenshtein and levenshteinlessequal functions in the fuzzystrmatch database extension of the PostgreSQL database management system are related to integer overflow. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...

UBUNTU-CVE-2026-69159

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior...

PT-2026-79231

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow occurs during size computation, which could allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information abo...

PT-2026-79230

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to cause a denial of service. An integer overflow occurs when an arithmetic operation attempts to create a numeric...

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...