PT-2026-84194

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 153.2 Description An integer overflow exists within the Graphics: ImageLib component. An integer overflow...

wget security, bug fix, and enhancement update

1.21.1-11 - Resolves: RHEL-220497 - async unsafe code in signal handler context 1.21.1-10 - Fix CVE-2026-58471: buffer overflow in convertfname - Resolves: RHEL-194521 1.21.1-9 - Resolves: RHEL-210636 - Fix integer+buffer overflow in htmlquotestring...

wget security, bug fix, and enhancement update

1.24.5-8 - Resolves: RHEL-220498 - async unsafe code in signal handler context 1.24.5-7 - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 1.24.5-6 - Fix integer and buffer overflow in htmlquotestring Resolves: RHEL-210625...

ASB-A-503550257

In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-511821731

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Erlang/OTP -- remote crash via gen_tcp with {packet,4}

The OTP 29.0.6 release notes report: A gentcp socket using the inet driver and packet,4 had a bug if receiving a packet with size just below INTMAX. That packet size wrapped in size calculations and made the received data overwrite its allocation and trash allocator metadata and subsequent blocks...

PUB-A-508715688

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Alibaba Cloud Linux 3 : 0270: gstreamer1-plugins-bad-free (ALINUX3-SA-2026:0270)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0270 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-19387: A heap out-of-bounds write...

ASB-A-508389055

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

[SECURITY] [DLA 4765-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 31, 2026 https://wiki.debian.org/LTS -...

CVE-2026-82908

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

EUVD-2026-68766

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908

MSI Dragon Center up to version 2.0.155.0 contains an integer overflow in the function MmioWritePath within the driver NTIOLib_X64.sys (component: MMIO Write Path Handler). The overflow is triggered by manipulating the argument count or elementSize parameters. Exploitation requires a local attack...

Updated expat & mingw-expat packages fix security vulnerabilities

Missing control flow integrity checks. CVE-2026-50219 Missing control flow integrity checks. CVE-2026-56131 Out-of-bounds write. CVE-2026-56132 Integer overflow. CVE-2026-56403 Integer overflow. CVE-2026-56404 Integer overflow. CVE-2026-56405 Integer overflow. CVE-2026-56406 Integer overflow...

MGASA-2026-0348 Updated clamav packages fix security vulnerabilities

An indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. CVE-2026-20345 An integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. CVE-2026-20339 An integ...

MGASA-2026-0352 Updated expat & mingw-expat packages fix security vulnerabilities

Missing control flow integrity checks. CVE-2026-50219 Missing control flow integrity checks. CVE-2026-56131 Out-of-bounds write. CVE-2026-56132 Integer overflow. CVE-2026-56403 Integer overflow. CVE-2026-56404 Integer overflow. CVE-2026-56405 Integer overflow. CVE-2026-56406 Integer overflow...

Updated clamav packages fix security vulnerabilities

An indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. CVE-2026-20345 An integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. CVE-2026-20339 An integ...

libssh2: integer overflow via large username or password arguments

A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the userauthpassword function by manipulating the usernamelen or passwordlen arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library...

libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...