openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...

openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...

CLSA-2026-1788334635 Fix CVE(s): CVE-2026-57433, CVE-2026-9538

SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/fixes/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehookcommon in dist/Storable/Storable.xs before it is incremented and passed to avextend;...

MiracleLinux 8 : pcp-5.3.7-22.el8_10.5 (AXSA:2026-1724:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1724:03 advisory. PCP: PCP linuxsockets PMDA: Arbitrary Command Execution via Command Injection CVE-2026-16524 PCP: PCP: Privilege escalation to root via linuxsockets...

CLSA-2026-1788194548 Fix CVE(s): CVE-2026-57433

SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehookcommon in dist/Storable/Storable.xs before it is incremented and passed to avextend; backported...

CLSA-2026-1788175535 Fix CVE(s): CVE-2026-57433

SECURITY UPDATE: signed integer overflow when deserializing a crafted Storable SXHOOK record - debian/patches/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehook in dist/Storable/Storable.xs before it is incremented and passed to avextend - CVE-2026-57433...

CLSA-2026-1788170819 Fix CVE(s): CVE-2021-4156, CVE-2022-33065, CVE-2025-52194

SECURITY UPDATE: multiple signed integer overflows in the AU, MAT4/MAT5, AVR, SDS, AIFF, IRCAM, RF64, PCM and IMA-ADPCM header parsers allow denial of service via a crafted file ELSCVE-171688 - debian/patches/CVE-2022-33065/CVE-2022-33065-1..8,11..13.patch: widen the overflowing dataend, blockwid...

[SECURITY] [DLA 4762-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 31, 2026 https://wiki.debian.org/LTS -...

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2026-032348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032348 advisory. In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. Tenable has extracted the preceding description block directly fr...

ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...

CLSA-2026-1787750503 poppler: Fix of CVE-2024-56378

CVE-2024-56378: prevent out-of-bounds read via signed integer overflow of the row index in JBIG2Bitmap::combine in JBIG2Stream.cc...

MiracleLinux 9 : pcp-6.3.7-8.el9_8.4 (AXSA:2026-1662:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1662:02 advisory. PCP: PCP linuxsockets PMDA: Arbitrary Command Execution via Command Injection CVE-2026-16524 PCP: PCP: Privilege escalation to root via linuxsockets...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104608 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1...

openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...

CLSA-2026-1787683852 gimp: Fix of CVE-2026-59088

CVE-2026-59088: prevent signed integer overflow of the width-by-height product in the FLI plug-in by widening the multiplication to gsize/gint64 in the frame buffer allocations, memset and memcpy calls, and by switching the allocations to gtrymalloc with a failure check...

CLSA-2026-1787682600 gimp: Fix of CVE-2026-59088

CVE-2026-59088: prevent signed integer overflow of the width-by-height product in the FLI plug-in by widening the multiplication to gsize/gint64 in the frame buffer allocations, memset and memcpy calls, and by switching the allocations to gtrymalloc with a failure check...

rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT

...

EUVD-2026-64366

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Use unsigned int for ndpindex The variable ndpindex is declared as a signed integer, but it stores the return value of getncm, which is unsigned. A malicious host can supply a large offset that overflows the...

CVE-2026-74679 usb: gadget: f_ncm: Use unsigned int for ndp_index

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Use unsigned int for ndpindex The variable ndpindex is declared as a signed integer, but it stores the return value of getncm, which is unsigned. A malicious host can supply a large offset that overflows the...