CVE-2026-88386

The libsndfile library (version 1.2.2 ) is vulnerable to a misaligned memory access issue within the psf_binheader_readf() function. This flaw occurs during the parsing of WAV fmt chunks , where a specially crafted WAV file can cause the function to cast an unaligned destination address to an uns...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

Security update for gvfs (important)

openSUSE security update: security update for gvfs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21875-1 Rating: important References: bsc1278156 bsc1278157 bsc1278158 bsc1278159 Cross-References: CVE-2026-84267 CVE-2026-84268 CVE-2026-84269...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88360

Removed by vendor...

PT-2026-104863

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from num pd vregs to num pds, which would shift the info...

PT-2026-104940

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process read and process write usr len is read from a network-supplied message field le16 to cpu and used to compute data len = off - usr len without validating that usr len off causing an...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue within the DNS dissector and serializer deserialization code . The root cause is that specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignme...

PT-2026-97991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi wifi driver within the mvm module. The ba notif-tid variable, which is controlled by the firmware, is used as an array index for tid data without proper...

Linux Distros Unpatched Vulnerability : CVE-2026-93250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: mdb: Fix use-after-free in vxlanmdbflush vxlanmdbflush iterates over the MDB entries using hlistforeachentrysafe, which only tolerates the removal of the...

Linux Distros Unpatched Vulnerability : CVE-2026-88386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the functio...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

PT-2026-98298

Name of the Vulnerable Software and Affected Versions libsndfile version 1.2.2 Description A misaligned memory access issue exists when parsing WAV fmt chunks. A specially crafted WAV file can cause the psf binheader readf function to cast an unaligned destination address to unsigned int and...

kernel: xfrm: ah6: validate routing header segments_left

A flaw was found in the Linux kernel's xfrm subsystem, specifically within the AH6 Authentication Header for IPv6 module. The ipv6rearrangerthdr function does not properly validate the segmentsleft field in routing headers when processing raw IPv6 HDRINCL packets. This oversight allows an attacke...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...