RHEL 8 : gstreamer1-plugins-good (RHSA-2026:73424)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73424 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

Linux Distros Unpatched Vulnerability : CVE-2026-95520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is...

CVE-2026-95284: Heap-based Buffer Overflow

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-92368: Heap-based Buffer Overflow

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

PT-2026-102502

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-95520: Out-of-bounds Write

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-102331: Heap-based Buffer Overflow

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-102661

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux and macOS versions prior to 15.82 Description A heap-based buffer overflow occurs during the processing of .tvs session recording files. A size mismatch during the decompression of recorded session dat...

CVE-2026-95318: Heap-based Buffer Overflow

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Amazon Linux 2023 : corosync, corosync-vqsim, corosynclib (ALAS2023-2026-3138)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3138 advisory. A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runti...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:73040)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73040 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

CVE-2026-96417: Heap-based Buffer Overflow

RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95349: Heap-based Buffer Overflow

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95283: Heap-based Buffer Overflow

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102566: Out-of-bounds Write

CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...

Medium: libxml2

Issue Overview: A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX...

CVE-2026-95389: Heap-based Buffer Overflow

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-98025

A flaw was found in the Linux kernel's cx82310eth USB Ethernet driver. An attacker connecting a malicious USB device can trigger a heap-based buffer overflow by sending crafted packets containing a reboot indicator. Because the driver fails to discard the packet after detecting the reboot signal,...

Updated libxml2 packages fix security vulnerabilities

The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...