Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106157 advisory. FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c that...

Linux Distros Unpatched Vulnerability : CVE-2026-80803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the...

Linux Distros Unpatched Vulnerability : CVE-2026-81666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was found in Corosync's handling of membership commit token messages. The length- validation check for these messages can be bypassed on...

RHEL 10 : kernel (RHSA-2026:63128)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63128 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear...

The vulnerability of the `dp_sdp_messagedebugfs_write()` function in the `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

The vulnerability of the `ivpu_ipc_receive()` function in the drivers/accel/ivpu/ivpu_ipc.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the iris_vb2_stop_streaming() function in the drivers/media/platform/qcom/iris/iris_vb2.c file of the Linux kernel-based multimedia device driver module allows a malicious actor to cause a service failure.

The vulnerability of the irisvb2stopstreaming function in the drivers/media/platform/qcom/iris/irisvb2.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the MongoDB database management system, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the MongoDB database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-85655

In the Linux kernel, the following vulnerability has been resolved: rndis host: add overflow check in rndis rx fixup Add an overflow check to ensure that data offset + data len + 8 does not wrap, which would enable an OOB read of the USB data buffer...

PT-2026-85450

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message...

PT-2026-86167

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response update service route in pjsua acc.c. This affects applications that register using the...

PT-2026-86170

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client http client.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

PT-2026-86172

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit 4472a31 Description A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. This occurs because several command-line handling paths write an...

PT-2026-85757

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow...

PT-2026-85756

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

PT-2026-86256

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs sbi time parse function...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

PT-2026-85400

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the get dell system info idrac info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when usi...

PT-2026-85402

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem tool. This issue occurs within the output dell system info cmc ipv6 info function located in ipmi-oem/ipmi-oem-dell.c, specifically when using t...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.10 (AXSA:2026-1755:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1755:10 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF fil...