The vulnerability of the drm_gem_fb_init_with_funcs() function in the drivers/gpu/drm/drm_gem_framebuffer_helper.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmgemfbinitwithfuncs function in the drivers/gpu/drm/drmgemframebufferhelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploitation of this vulnerability could allow an...

The vulnerability of the rxgk_extract_token() function in the net/rxrpc/rxgk_app.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which supports RxRPC session sockets in Linux operating systems, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260907-73-0001

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

ROS-20260907-73-0030

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

CVE-2026-86314: Integer Overflow or Wraparound

Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...

CVE-2026-86289: Integer Overflow or Wraparound

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

MiracleLinux 9 : gegl04-0.4.62-1.el9_8.2 (AXSA:2026-1775:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1775:03 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

Linux Distros Unpatched Vulnerability : CVE-2026-80810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/rsrc: fix folio size overflow in iovecfillbvec iovecfillbvec computes the folio size with a plain int 1: unsigned long foliosize = 1 folioshift;...

Oracle Linux 10 : ELSA-2026-63128-0: / kernel (ELSA-2026-631280)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-631280 advisory. - net: ipv6: clear suppressed fib6 rule result Jamie Bainbridge RHEL-246368 CVE-2026-74581 - iomap: fix out-of-bounds bitmapset with zero-length ran...

CVE-2026-84732: Integer Overflow or Wraparound

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow...

ROS-20260907-73-0041

The vulnerability in ffmpeg is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260907-73-0097

The vulnerability of Microsoft.NET Framework software and the Visual Studio source code editor is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-80887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user- supplied shader window against its backing buffer with...

OPENSUSE-SU-2026:21768-1 Security update for msgpack-c

This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation bsc1275911...

libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053277 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053268 advisory. In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in createdirtylog The argument count calculation in createdirtylo...