CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

EUVD-2026-94382

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2026-97550

In the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in perbinval computation LOLLM noticed that we're doing the unit conversion in the perbinval computation backwards -- xfsbufinvallogspace's second parameter is supposed to be in bytes, but maxbinval is i...

CVE-2026-97550

The Linux kernel contains a logic error in the xfs filesystem regarding per_binval computation. The vulnerability stems from performing unit conversions in the wrong direction: the second parameter of xfs_buf_inval_log_space is expected in bytes , while max_binval is measured in fsblocks . This r...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-93019: Unsigned to Signed Conversion Error

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3785)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the soupbodyinputstreamreadchunked functio...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3810)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the soupbodyinputstreamreadchunked functio...

ROS-20260914-73-0123

The vulnerability of the Bindings component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0166

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly...

The vulnerability of the Tint component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Tint component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Bindings component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the Bindings component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of XML components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created XML file...

The vulnerability in the Firefox web browser and Thunderbird email client, related to data type conversion errors, allows attackers to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs, related to data type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs is related to data type conversion errors. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted malicious file...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

DEBIAN-CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...

UBUNTU-CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...

CVE-2026-53396 nfsd: fix posix_acl leak and ignored error in nfsd4_create_file

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in its ACL handling: The return value of nfsd4acltoattr is silently discarded. When the NFSv4-to-POSIX ACL conversion fails e.g., -EINVAL f...