CVE-2026-97550

In the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in perbinval computation LOLLM noticed that we're doing the unit conversion in the perbinval computation backwards -- xfsbufinvallogspace's second parameter is supposed to be in bytes, but maxbinval is i...

Linux Distros Unpatched Vulnerability : CVE-2026-88367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document...

Linux Distros Unpatched Vulnerability : CVE-2026-88362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively...

Linux Distros Unpatched Vulnerability : CVE-2026-88368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvgaddActive function. A specially crafted SVG document...

Linux Distros Unpatched Vulnerability : CVE-2026-97550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix unit conversions in perbinval computation LOLLM noticed that we're doing the unit conversion in the perbinval computation backwards --...

Linux Distros Unpatched Vulnerability : CVE-2026-88366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document...

PT-2026-98490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where unit conversions in the per binval computation are performed incorrectly. Specifically, the second parameter of the xfs buf inval log space...

CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

DEBIAN-CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

UBUNTU-CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

CVE-2026-96883 Type confusion in AWS pgcollection allows remote code execution

pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements that rely on mismatched type metadata in...

CVE-2026-88367

A flaw was found in NanoSVG. By providing a specially crafted SVG document with an excessively large stroke width, an attacker can trigger an improper numeric conversion during stroke rasterization. This issue causes an unexpected process termination, leading to a Denial of Service DoS...

CVE-2026-88367

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...

UBUNTU-CVE-2026-88367

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...

DEBIAN-CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

CVE-2026-88368

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvgaddActive function. A specially crafted SVG document containing sufficiently large geometry coordinates can cause fixed-point-scaled edge coordinates to exceed the range representable by int. T...

CVE-2026-88366

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...

UBUNTU-CVE-2026-88366

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...