Microweber <1.2.12 - Integer Overflow

Microweber before 1.2.12 is susceptible to integer overflow. The application allows large characters to insert in the input field 'first & last name,' which can allow an attacker to cause a denial of service via a crafted HTTP request. id: CVE-2022-0968 info: name: Microweber 1.2.12 - Integer...

GitLab CE/EE < 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer Overflow

GitLab CE/EE 19.2.0–19.2.7, 19.3.0–19.3.4, and 19.4.0–19.4.1 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config id: CVE-2026-9722...

CVE-2026-109806

The SAP NetWeaver (Internet Graphics Service) component is vulnerable to an integer overflow due to insufficient validation of input values within incoming requests. An unauthenticated user can exploit this by sending a specially crafted request containing malformed image data . This vulnerabilit...

EUVD-2026-120688

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

PT-2026-141253

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

CVE-2026-125267

FFmpeg versions before 8.1.3 and 9.x before 9.0.2 are susceptible to a heap out-of-bounds write vulnerability within the APAC decoder located in libavcodec/apac.c. The root cause is an unreset bitstream index ; an attacker can provide a crafted APAC file that causes the bitstream_index to grow an...

CVE-2026-125259

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the ff_prores_kostya_encode_init() function. The root cause is the use of 32-bit arithmetic to calculate frame_size_upper_bound for large frame dimensions, which results in an undersized packet buffer. An attacker providing hi...

CVE-2026-125253

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the cbs_vp9_split_fragment() function located in libavcodec/cbs_vp9.c. On 32-bit builds , the overflow occurs during the superframe size check. An attacker can exploit this by providing a crafted VP9 packet with a forged super...

CVE-2026-125251

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the VVC decoder's alloc_frame() function, specifically located in libavcodec/vvc/refs.c. On 32-bit builds , this flaw causes an undersized allocation for the reference picture list. An attacker can exploit this by providing a ...

CVE-2026-125249

FFmpeg versions 7.1 through 9.0.2 are vulnerable to an integer overflow within the ff_vk_decode_add_slice() function in libavcodec/vulkan_decode.c. This flaw results in an incorrect calculation of the Vulkan hardware acceleration bitstream buffer size. An attacker providing a crafted stream with ...

CVE-2026-125248

FFmpeg versions 9.0 through 9.0.2 are affected by an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c. The flaw occurs when processing large frames because the software undersizes the float remap GPU buffer . An attacker can exploit this by providing large GBRPF32 or GBRAPF32 images ...

CVE-2026-125247

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the dng_decode_tiles() function. By providing crafted DNG tile dimensions where TileWidth or TileLength are set near INT_MAX , an attacker can cause the tile loop to never execute. This results in the output of a frame that ex...

CVE-2026-125234

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the wavpack_encode_init() function located in libavcodec/wavpackenc.c. This flaw occurs when the software computes the block size from the sample rate and channel count. An attacker can exploit this by providing a crafted audi...

CVE-2026-125234

FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpackencodeinit in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate...

CVE-2026-125227

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow within the cbs_jpeg_write_scan() function in libavcodec/cbs_jpeg.c. This flaw leads to a heap buffer overflow specifically on 32-bit builds . An attacker can exploit this by providing a crafted MJPEG/JPEG stream containing a scan...

CVE-2026-125230

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the pcm_rechunk bitstream filter . An attacker can provide a file with a manipulated channel count; when remuxed into MXF, GXF, or DAUD formats, this causes a division by zero by overflowing the sample_size value, leading to a...

CVE-2026-125230

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the pcmrechunk bitstream filter that allows attackers to trigger division by zero via a crafted channel count. Attackers can supply a file declaring a huge channel count that is remuxed into MXF, GXF or DAUD, overflowing samplesiz...

CVE-2026-125222

FFmpeg versions through 9.0.2 are susceptible to an integer overflow vulnerability within the hap_parse_frame_header() function located in libavcodec/hapdec.c. This flaw allows attackers to trigger a heap buffer overflow on 32-bit builds by crafting Hap video frames with Snappy length prefixes th...

CVE-2026-125100

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the OpenEXR decoder specifically within the decode_frame() function in libavcodec/exr.c. The root cause is a miscalculation of the tiled block count . An attacker can provide a crafted tiled OpenEXR image with large dimensions...

CVE-2026-125070

FFmpeg versions through 9.0.2 are vulnerable to a NULL pointer dereference in the tqi_decode_frame() function within libavcodec/eatqi.c. The vulnerability occurs because the software ignores an init_get_bits() failure following an integer overflow . An attacker can trigger this by providing a cra...