CVE-2026-16724 Power System Integer Overflow

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16724

IBM Power Systems firmware running the Virtualization Management Interface (VMI) is vulnerable to CWE-190 integer overflow, classified CVSS 4.5 (Medium). Authenticated administrators can crash the VMI, which auto-restarts, but repeated exploitation could cause sustained availability impact. Affec...

CVE-2026-16852 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

EUVD-2026-62747

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

CVE-2026-16852

IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, contain an integer overflow exploitable by a remote attacker with no privileges or user interaction, causing denial of service (CVSS 7.5 HIGH, availability impact only). IBM support reference: https://www.ibm.com/support/pages/node/7283858. No exploitati...

CVE-2026-16661 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

CVE-2026-16661

CVE-2026-16661 affects the IBM PowerVM Hypervisor service processor mailbox interface across multiple firmware versions (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, and FW1120.00). The root cause is an integer overflow (CWE-190). An attacker with authenticated service-level acces...

CVE-2026-16839

Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...

EUVD-2026-62728

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

CVE-2026-16834 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow...

EUVD-2026-62722

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow...

CVE-2026-16834

CVE-2026-16834 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote attacker can trigger an integer underflow to cause a denial of service , with no authentication or user interaction required. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

GHSA-VJHX-2CQW-3Q6Q Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted /etc/ld.so.cache file in its filesystem. When Inspektor Gadget attaches any uprobe-based gadget, it parses this file in the container startup path. A malicious cache causes 53...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-74469

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...

CVE-2026-19321

IBM Power Firmware is vulnerable due to CWE-190: Integer Overflow or Wraparound in host firmware. An attacker with service-processor access can craft commands to leak inaccessible hardware registers, causing limited confidentiality and high availability impact (CVSS 6.7). Affected versions includ...

CVE-2026-19321 Power System Integer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

CVE-2026-55648

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdpimagecopyfromicondata in libfreerdp/codec/color.c calculates nWidth multiplied by nHeight multiplied by FreeRDPGetBytesPerPixelformat in 32-bit arithmetic. A malicious RDP server can send a RAIL TSICONINFO...

CVE-2026-55191

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculate the intermediate YUV444 allocation size in libfreerdp/codec/h264.c with 32-bit multiplication in avc444ensurebuffer. A malicious R...