PT-2026-121689

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

UBUNTU-CVE-2026-55543

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, a...

FreeRDP 3.31.1 Integer Truncation Heap Buffer Overflow

FreeRDP versions 3.0.0 through 3.31.1 contain an integer truncation vulnerability in licensecheckstreamlength that lets a malicious RDP server trigger a heap buffer overflow on 32-bit clients...

PT-2026-122190

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get domains in gdhcp/client.c. It copies a fixed NS MAXDNAME 1025 bytes from a DHCPv6 DOMAIN LIST option 24 value into a 1026-byte stack buffer dns name regardless of the actual option length, then...

perl-DBI:1.641 security update

perl-DBI 1.641-11 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting read during numeric type casting Resolves: RHEL-271961 1.641-10 - Fix number of tests Resolves: RHEL-247869 1.641-9 - Fix placeholder limit on :N and :pN style placeholders...

Linux Distros Unpatched Vulnerability : CVE-2025-60480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers t...

PT-2026-122216

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device next/class/bt hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bt hci tx sync in allocated that buffer from bt hci ep pool, a fixed pool whose slots...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420 1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CM...

UBUNTU-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...

ConnMan buffer error vulnerability

ConnMan versions 2.0 and earlier contain a buffer error vulnerability. This vulnerability arises because the getdomains function fails to properly limit the length of the DOMAINLIST option when processing DHCPv6 REPLY. As a result, DNS label traversal can lead to out-of-bounds reads and writes in...

PT-2026-121859

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi mvm component where scheduled scans constructed probe requests before performing length validation via the iwl mvm scan fits function. This sequence allowe...

Linux net/qrtr/af_qrtr.c Heap Buffer Overflow DoS

The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel batadv_interface_rx() Buffer Overflow

The vulnerability of the batadvinterfacerx function in the net/batman-adv/soft-interface.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility ...

ROS-20261023-73-0093

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

ROS-20261023-73-0022

The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0090

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a corrupted file...

Alibaba Cloud Linux 3 : 0318: php (ALINUX3-SA-2026:0318)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0318 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-1218: The mysqlnd wire protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-93517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that coul...

Rocky Linux 9.6 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.6:CLSA-2026:1792755607)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792755607 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allow...

CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...