TencentOS Server 3: python-pillow (TSSA-2026:0769)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0769 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-66757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header...

Linux Distros Unpatched Vulnerability : CVE-2026-64548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and...

FreeBSD : Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input (445dc6b9-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445dc6b9-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted...

Elasticsearch 8.x < 8.19.15 / 9.0.x < 9.2.9 / 9.3.x < 9.3.4 DoS (ESA-2026-60)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.15, or 9.0.x prior to 9.2.9, or 9.3.x prior to 9.3.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-60 advisory. - Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in HdrHistogram [CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in HdrHistogram CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686. HdrHistogram is used in our Java Microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

CVE-2026-64548 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and computes copy + len for the page allocation size. Since len comes from...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mixpresentationobu function of libavformat/iamfparse.c, which calls avcalloccountlabel, sizeoflanguagelabel with the attacker-controlled countlabel before validating the...

CVE-2026-32665

A flaw was found in Unbound when DNS-over-QUIC DoQ is enabled. An attacker could exploit improper validation of client-provided data length, leading to excessive memory allocation. This can cause the system to exceed its configured memory limits for QUIC connections, resulting in a Denial of...

CVE-2026-66757

The CVE-2026-66757 issue affects the GIMP file-sgi plugin. Processing an RLE SGI image can trigger a signed integer overflow when reading header dimensions (ysize and zsize). If both are set to 65535, ysize * zsize overflows a 32-bit int prior to calloc, causing undefined behavior that aborts the...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890

CVE-2026-54890 describes an Integer Underflow in the BEAM VM’s ETF decoder: the BIT_BINARY_EXT (tag 77) handler accepts an encoding with length and trailing-bits both zero, causing the bitstring size calculation to underflow and produce a ~2^64 value, which is then used as a memory allocation siz...

EUVD-2026-49326

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

PT-2026-65099

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-sgi plugin when processing RLE-compressed SGI images. The plugin reads image header dimensions ysize and zsize as 16-bit unsigned integers. If a crafted file sets both...

PT-2026-64993

Name of the Vulnerable Software and Affected Versions erlang otp versions 27.0 through 27.3.4.14 erlang otp version 28.5.0.3 erlang otp versions 29.0 through 29.0.3 erts versions 15.0 through 15.2.7.10 erts version 16.4.0.3 erts versions 17.0 through 17.0.3 Description An integer underflow exists...