PT-2026-118017

Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2...

Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Summary extractPivotTableFields builds order := pc.getPivotCacheFieldsName from xl/pivotCache/pivotCacheDefinitionN.xml's list, then indexes it with values taken from a separately parsed xl/pivotTables/pivotTableN.xml part with zero cross-validation: orderfield.Fld where field.Fld is a raw...

CVE-2026-63916

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...

CVE-2026-63916 HID: wacom: Fix OOB write in wacom_hid_set_device_mode()

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...

EUVD-2026-45689

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...

CVE-2026-63916

CVE-2026-63916 affects the Linux kernel HID subsystem for Wacom devices. The vulnerability arises because wacom_hid_set_device_mode() assumed HID_DG_INPUTMODE always resides in the first feature-report field (field[0]). If HID_DG_INPUTMODE is in another field and the first field’s report_count is...

PT-2026-61233

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function. The issue occurs because the function assumes the HID DG INPUTMODE usage is always located in the first field...