PT-2026-97977

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during XI2 class parsing within the size classes and copy classes functions. This flaw allows malicious servers to cause the X client to crash. Recommendations Update libXi...

PT-2026-97978

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs in the XI2 class parser of libXi. This flaw allows a malicious X server to cause a crash of an attached X client. An out-of-bounds read is a condition where a program reads...

PT-2026-98286

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description The function php openssl matches wildcard name in ext/openssl/xp ssl.c contains an integer underflow in the length argument passed to memchr. This occurs when a TLS server certificate uses a...

CVE-2026-93542: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

CVE-2026-93544

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...

PT-2026-105012

An out-of-bounds read in libXi's XI2 class parsing via size classes and copy classes in libXi before 1.8.4 could be used by malicous servers to crash the X client...

PT-2026-97987

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs filldir function copies entry names from SMB1 TRANS2 FIND FIRST or FIND NEXT responses using a length de.namelen provided by the server...

PT-2026-97873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs interface where the proc bus pci read function incorrectly uses capableCAP SYS ADMIN to determine config space read access. This function checks the...

PT-2026-97880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the of alias scan stem parser. The issue occurs because the parser executes the isdigit function on the byte at end - 1 before verifying that end start...

PT-2026-97901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the GUD protocol implementation. The gud connector add tv mode function passes fixed-size TV mode name entries directly to drm mode create tv properties...

PT-2026-105015

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-93545

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

PT-2026-97802

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.7.1 Description A heap over-read occurs in the ConcatenationLoader when copying pixel data frames. The issue arises because the software fails to validate the PixelData buffer length against the declared NumberOfFrame...

Linux Distros Unpatched Vulnerability : CVE-2026-81883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because...

Linux Distros Unpatched Vulnerability : CVE-2026-97437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: fix out-of-bounds read in ntfsdiremit and hdrfinde The bounds check in ntfsdiremit compares fname-namelen a character count against e-size a byte count...

MiracleLinux 9 : kernel-5.14.0-687.36.1.el9_8 (AXSA:2026-1900:83)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1900:83 advisory. kernel: futex: Fix UaF between futexkeytonodeopt and vmareplacepolicy CVE-2026-23415 kernel: netfilter: nfnetlinkcthelper: fix OOB read in...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...

Linux Distros Unpatched Vulnerability : CVE-2026-97428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by...

Linux Distros Unpatched Vulnerability : CVE-2026-93787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: bound dirent name against end of SMB response in cifsfilldir cifsfilldir copies the entry name out of an SMB1 TRANS2FINDFIRST / FINDNEXT response...

Linux Distros Unpatched Vulnerability : CVE-2026-93816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each record...