PT-2026-121852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 driver where invalid data within dec output info can lead to the driver writing to invalid memory. This occurs due to a buffer overflow in the wave5 vpu dec...

Rocky Linux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...

SUSE SLED15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4836-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4836-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl...

Linux Distros Unpatched Vulnerability : CVE-2026-98882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2026:4845-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4845-1 advisory. This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation ...

Linux Distros Unpatched Vulnerability : CVE-2026-115484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read...

Linux Distros Unpatched Vulnerability : CVE-2026-106547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrar...

Linux ip_vs_core Heap Buffer Overflow DoS

The vulnerability of the net/netfilter/ipvs/ipvscore.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

FreeBSD : cjose -- Heap-based Buffer Overflow (35b3a492-b05a-11f1-9369-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35b3a492-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C...

Linux Distros Unpatched Vulnerability : CVE-2025-55640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a...

Oracle Linux 7 : unbound (ELSA-2026-72199)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72199 advisory. - Fix CVE-2026-81642 DNSKEY digest buffer overflow and add regression test Orabug: 40081199 Tenable has extracted the preceding description block directly from...

unbound security update

1.6.6-5.0.3 - Fix CVE-2026-81642 DNSKEY digest buffer overflow and add regression test Orabug: 40081199 1.6.6-5.0.1 - Fix CVE-2023-50387 and CVE-2023-50868 Orabug: 37387426...

nginx 0.1.29 < 1.30.6 / 1.31.x < 1.31.7 Buffer Overflow Vulnerability

According to its Server response header, the installed version of nginx is 0.1.29 prior to 1.30.6 or 1.31.0 prior to 1.31.7. It is, therefore, affected by the following issue : - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive...

ROS-20261023-73-0097

The vulnerability in libxml2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0165

The vulnerability in libxml2 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

PT-2026-121689

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

ROS-20261023-73-0093

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

UBUNTU-CVE-2026-55543

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, a...

Pillow 12.3.0 JPEG Decoder Heap Buffer Overflow

Pillow version 12.3.0 and earlier contain a heap buffer overflow in ImagingJpegDecode when thumbnail processes an 8-bit lossless SOF3 JPEG with libjpeg-turbo 3.x. https://packetstorm.news/download/237261...