CVE-2024-30051

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thesis Research -orange Heap-based Buffer Overflow in Windows Desktop Window Manager dwmcore.dll Local Privilege Escalation → Integrity Level SYSTEM via DWM process Build target: Windows 11 22H2 10.0.22621.3447 · Patch: KB5037771 Descripti...

CVE-2026-59959 SAIL: WebP decoder division by zero through malformed animated canvas metadata

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame...

CVE-2026-59959 SAIL: WebP decoder division by zero through malformed animated canvas metadata

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146319 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...

CLSA-2026-1792769449 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46469: fix division by zero in qtdemuxparsetrak when an MP4 signals 0 audio channels - CVE-2026-46470: fix division by zero in qtdemux audio sample description parsing when an MP4 signals 0 audio channels...

CLSA-2026-1792769310 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792768971 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

Multiple timing variability issues in operations intended to be constant-time

Summary Several operations intended to be constant-time could execute secret-dependent branches, depending on the compiler and target CPU. These include subtraction, zero counting, division, and Montgomery multiplication. Additionally, UintRef equality could terminate at the first unequal limb, a...

RUSTSEC-2026-0387 Multiple timing variability issues in operations intended to be constant-time

Summary Several operations intended to be constant-time could execute secret-dependent branches, depending on the compiler and target CPU. These include subtraction, zero counting, division, and Montgomery multiplication. Additionally, UintRef equality could terminate at the first unequal limb, a...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...

ROS-20261023-73-0050

The vulnerability in libpcap is related to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-98722

A flaw was found in the Linux kernel's block2mtd driver. The driver fails to validate that the erase size module parameter is non-zero before performing a division operation during device initialization. A local user with privileges to modify kernel module parameters can exploit this vulnerabilit...

CVE-2026-98672

A flaw was found in the Linux kernel's STM32 Analog-to-Digital Converter ADC driver. When an ADC conversion fails or returns a zero value, subsequent calculation on the channel data can trigger a division by zero. A local user could exploit this vulnerability to crash the system, leading to a...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792421874)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792421874 advisory. - A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage in the MagickCore/colorspace...

ROS-20261022-73-0011

The vulnerability in freerdp3 is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0083

Vulnerability in the ecamdevreadmediatype function of the RDP client FreeRDP: A division by zero occurs in the client before a reverse call to the HAL camera function is made, allowing an attacker to trigger a service failure on the client side...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142521 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and...

CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...

CLSA-2026-1792572593 gstreamer1-plugins-good: Fix of 3 CVEs

CVE-2026-46469: avoid division by zero in qtdemuxparsetrak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemuxaudiocaps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gstwavparseadtlchunk on odd-sized adtl...