GHSA-P8XC-W3Q4-H64X OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...

OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...

kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer &dev-i2csubipregs caused kernel crash and out-of-bounds error: BUG: KASAN: slab-out-of-bounds in...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

The vulnerability of the net/sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the net/sctp component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the fs/notify component in Linux operating systems allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/notify component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

📄 PJSIP PJMEDIA H.264 Denial of Service

A logic validation flaw was identified in the H.264 packetization routine within the PJMEDIA component of PJSIP. Specifically, insufficient validation of FU-A Fragmentation Unit – Type A state handling in pjmediah264packetize may allow malformed RTP payloads to trigger unsafe pointer arithmetic...

The vulnerability of the `nvmet_tcp_handle_h2c_data_pdu()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-24872

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24872

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24872

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24872 Pointer arithmetic error in SkyFire_548

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24872

CVE-2026-24872 affects SkyFire_548 (before 5.4.8-stable5). The issue is due to improper pointer arithmetic in SkyFire_548. The vulnerability is rated CVSSv3.1: 9.8 (CRITICAL) with Network attack vector, no privileges, no user interaction, and high impact on confidentiality, integrity, and availab...

EUVD-2026-4818

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24872 Pointer arithmetic error in SkyFire_548

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24812

CVE-2026-24812 affects the project “root” (root-project) with the vulnerability located in builtins/zlib/inftrees.c. The underlying issue is an improper pointer arithmetic in that source file, leading to impact on the root component up to version 6.36.00-rc1. The CVSS data provided (v4.0, base sc...

CVE-2026-24812 An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1...

CVE-2026-24812 An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1...

CVE-2026-24811

CVE-2026-24811 affects root-project root (builtins/zlib/inffast.c). The issue is described as improper pointer arithmetic in root-project/root’s zlib implementation. CVSS 4.0 metrics indicate a mostly network-exposed, high-severity vulnerability with low user interaction and high impact on confid...

CVE-2026-24811 An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inffast.C. This issue affects root...