httpc does not bound server-supplied numeric header values before integer conversion

...

eldap does not bound the port component of a referral URL before integer conversion

...

uri_string does not bound the port component of a URI before integer conversion

...

PT-2026-85067

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An incorrect numeric conversion in the JSON parsing component of the BSON library allows an unauthenticated party to supply input that causes unusually large text values to be silent...

PT-2026-85070

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver affected versions not specified Description An incorrect numeric type conversion in the BSON document building component may cause a length value to be interpreted incorrectly. If an application provides an extremely large,...

PT-2026-85270

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...

CVE-2026-64200: Out-of-bounds Read

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...

CVE-2026-84966: Incorrect Conversion between Numeric Types

An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application supplies an extremely large, non-terminated field name to the builder, the library may read memory outside the intende...

CVE-2026-84963: Incorrect Conversion between Numeric Types

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...

CVE-2026-84969: Out-of-bounds Write

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow an attacker to...

GHSA-4Q39-2JHR-7QX8 Plate: SSRF with response disclosure in DOCX image embedding

Summary @platejs/docx-io can fetch remote image URLs while converting HTML to DOCX. When an application converts attacker-controlled HTML in a server-side or privileged environment, this can cause the application environment to make unintended outbound requests and include fetched image data in t...

SUSE CVE-2026-59696

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Tint component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Tint component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Vulnerability of CSS components in Google Chrome and Microsoft Edge web browsers, allowing attackers to access confidential data

The vulnerability of the CSS components in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Chrome Tabs component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Chrome Tabs component in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...