Apache Struts2 Core 7.4.0 Integer Overflow

Apache Struts2 Core version 7.4.0 and below contains an integer-overflow validation bypass where locale grouping separators can allow out-of-range numeric input to be narrowed and wrapped during action-property conversion. The supplied proof of concept demonstrates an Integer value wrapping to a...

Dell PowerProtect Data Domain digital error vulnerability

Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain contain a numerical error vulnerability. This vulnerability stems from integer overflow or wrap-around errors. Privileged attackers with remote access...

Dell PowerProtect Data Domain digital error vulnerability

Versions 7.7.1.0 through 8.8 of Dell PowerProtect Data Domain, versions 7.13.1.0 through 7.13.1.80 of LTS2024, versions 8.3.1.0 through 8.3.1.40 of LTS2025, and versions 8.6.1.0 through 8.6.1.20 of LTS2026 contain a numeric error vulnerability. This vulnerability stems from integer overflow or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because gntallocioctlalloc fails to verify whether the number of grants requested by a user exceeds the global limit prior to allocation; this m...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from the failure to handle a 32-bit sequence wrap-around when comparing bmseq in stripe batch within md/raid5; as a result, newer bmseq values ma...

CLSA-2026-1792612080 gawk: Fix of 3 CVEs

CVE-2023-4156: builtin.c formattree: when collecting positional field widths or precisions, check for wrap around to negative values - CVE-2026-40469: builtin.c subcommon: check for overflow in the result buffer size calculation using 64-bit math, failing with a fatal error instead of corrupting...

Apache DataSketches numerical error vulnerability

A security vulnerability exists in Apache DataSketches C++ versions from 4.1.0 up to and including 5.3.0. This vulnerability arises because the Count-Min sketch fails to include the leading part of the input size during deserialization; additionally, there is a 32-bit integer wrap-around in table...

gawk: Fix of 3 CVEs

CVE-2023-4156: builtin.c formattree: when collecting positional field widths or precisions, check for wrap around to negative values - CVE-2026-40469: builtin.c subcommon: check for overflow in the result buffer size calculation using 64-bit math, failing with a fatal error instead of corrupting...

CVE-2026-71884

A flaw was found in Bouncy Castle. The native one-shot Counter CTR mode cipher fails to verify that the input data length fits within the counter space defined by the initialization vector. When processing overly long inputs, the counter wraps around and causes the keystream to repeat. This flaw...

PT-2026-108755

dynamic object create in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj size getotype + size, and for thread stack elements as STACK ELEMENT DATA SIZEsize a round-up plus fixed overhead, without checking either expression for unsigned...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: padata: Use integer wrap-around to prevent deadlock in cases of seqnr overflow. When submitting more than 2^32 padata objects to padatadoserial, the current sorting implementation incorrectly sorts padata objects with overflowed...

CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

PT-2026-89549

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A size check in the client-side authentication path can wrap around, allowing an unusually large user-name value to be accepted and copied past the end of a small buffer. This can le...

SUSE CVE-2026-80807

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double listaddtail call on bh-bassocbuffers within nilfslookupdirtydatabuffers. Analysis revealed that the root cause was the insertion of...

CVE-2026-47857 Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...

CVE-2026-47857 Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...

CVE-2026-47857 Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...

CVE-2026-47857

Reactor Core is affected by a Denial of Service condition in the Flux.windowTimeout operator when fairBackpressure is enabled. The root cause is a 20-bit index wrap-around that can cause the stream to hang, leading to an availability impact with no confidentiality or integrity loss. Affected vers...

CVE-2026-76189 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

cve-2026-47857 - MEDIUM - Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around

cve-2026-47857 - MEDIUM - Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around...