CVE-2026-108914: Buffer Copy without Checking Size of Input

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used...

Rocky Linux 9.6 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791806541)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791806541 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages...

EulerOS 2.0 SP13 : vim (EulerOS-SA-2026-4204)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2026-3212)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3212 advisory. A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to...

Rocky Linux 9.6 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc (ALMALINUX9.6:CLSA-2026:1791810115)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791810115 advisory. - Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4236)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...

CVE-2026-109255: Heap-based Buffer Overflow

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

PT-2026-110962

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description A heap-based buffer overflow write exists in the read-only dictionary loader. The String::reserve function in common/string.hpp performs a capacity check using a signed integer ints + 1, which...

HPESBNS05148 rev.1 - HPE NonStop Servers, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, memory corruption, Buffer Overflow, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NONSTOP KERNEL T9050 - T9050L02^BBP, T9050L02^BBS EXPAND T9057 - T9057L02^AIG and earlier XDR Streams T0248 - T0248L01^AAD an...

ALSA-2026:81517 Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

ALSA-2026:81518 Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

gd security update

2.3.2-3.1 - Fix buffer overflow and use of uninitialized memory in GIF decoding CVE-2026-9672 Related: RHEL-259613...

Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

ALSA-2026:80510 Important: compat-openssl10 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1. Security Fixes: openssl:...

RHEL 10 : gd (RHSA-2026:80500)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80500 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other...

TencentOS Server 4: gd (TSSA-2026:1076)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-108978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie:...

Amazon Linux 2 : libsoup (ALAS-2026-3998)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3998 advisory. A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequatel...

ALSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...