22266 matches found
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...
MGASA-2026-0364 Updated apr-util packages fix security vulnerabilities
Apache Portable Runtime Utility: aprpasswordvalidate vulnerable to timing attack. CVE-2025-49506 Apache Portable Runtime Utility: apr-util XML stack recursion crash. CVE-2026-32327 Apache Portable Runtime Utility: SQL Injection in aprdbdoracle. CVE-2026-34191 Apache Portable Runtime Utility: Heap...
MGASA-2026-0369 Updated libalsa2 packages fix security vulnerabilities
alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow. CVE-2026-25068 ALSA Library 1.2.16.1 Double-Free via parsedef in conf.c. CVE-2026-56109...
SUSE-SU-2026:23463-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...
OPENSUSE-SU-2026:21744-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...
Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by torch(Publicly disclosed vulnerability (CVE-2024-31583, CVE-2024-31580)
Summary Watson Machine Learning on Cloud Pak for Data is affected by CVE-2024-31583, CVE-2024-31580 Vulnerability Details CVEID:CVE-2024-31583 DESCRIPTION: Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. CWE:CWE-416:...
K000162602: NGINX ngx_http_js_module vulnerability CVE-2026-78689
Security Advisory Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML...
RLSA-2026:62142 Moderate: wget security, bug fix, and enhancement update
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or denial of service via crafted...
wget security, bug fix, and enhancement update
An update is available for wget. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS,...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
SUSE-SU-2026:23445-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...
gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...
SUSE-SU-2026:23538-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...
SUSE-SU-2026:23515-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...
SUSE-SU-2026:23512-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVPCipher bsc1275837. - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overfl...
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
RLSA-2026:62143 Moderate: wget security, bug fix, and enhancement update
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or denial of service via crafted...