Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001404 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : klibc vulnerabilities (USN-7959-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7959-1 advisory. It was discovered that zlib, vendored in klibc, did not properly handle integer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004467 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003258 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service integer overflow and memory corruption or possibly have...

USN-7959-1: klibc vulnerabilities

It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service...

USN-7959-1 klibc vulnerabilities

It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service...

MiracleLinux 7 : rsync-3.1.2-12.0.5.el7.AXS7 (AXSA:2025-11113:09)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-11113:09 advisory. CVE-2016-9840: fix improper pointer arithmetic in inftrees.c CVEs: CVE-2016-9840 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have...

CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

CVE-2021-41612

An issue was discovered in the ALU unit of the OpenRISC mor1kx processor. The carry flag is not being updated correctly for the subtract instruction, which results in an incorrect value of the carry flag. Any software that relies on this flag may experience corruption in execution...

CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

PT-2026-24131

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap over-read issue exists in the MAT decoder due to incorrect...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992922 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen inste...

PT-2025-54245

Name of the Vulnerable Software and Affected Versions SoX version 14.4.2 Description SoX version 14.4.2 contains a division by zero issue when processing WAV files, potentially leading to program crashes. An attacker can provide a crafted WAV file to trigger a floating point exception due to...

The vulnerability of the pid_nr_ns() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pidnrns function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __dm_suspend() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dmsuspend function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting XSS, occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions...

The vulnerability of the Davinci kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the Davinci kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the netlink component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netlink component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the sound/soc/soc-core.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sound/soc/soc-core.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pnv_php component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the pnvphp component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...