239 matches found
DEBIAN-CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
EUVD-2026-70505
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
PT-2026-85073
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
CVE-2026-84970: Incorrect Conversion between Numeric Types
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
CVE-2026-80213: Numeric Truncation Error
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was written unchanged, and thus the bytes on t...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a heap overflow in NLnet Labs Unbound [CVE-2026-42944]
Summary IBM Watson Speech Services Cartridge is vulnerable to a heap overflow in NLnet Labs Unbound, due to an issue that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet CVE-2026-42944. NLnet Labs Unbound is used as part ...
CVE-2026-65610
A flaw was found in nnn. This vulnerability arises from a numeric truncation error where the system incorrectly handles HOME path lengths exceeding 255 characters. An attacker, by manipulating the victim's execution environment, can provide a specially crafted HOME path. This manipulation causes...
CVE-2026-77014: Numeric Truncation Error
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65610: Numeric Truncation Error
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
Numeric Truncation Error
Overview Affected versions of this package are vulnerable to Numeric Truncation Error in readbrtable in arch/WASM/WASMDisassembler.c. An attacker can cause no-progress disassembly or parser desynchronization by supplying a large, well-formed brtable instruction through csdisasm or csdisasmiter. T...
CVE-2026-49263: Numeric Truncation Error
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...