65698 matches found
CVE-2026-79215: Integer Overflow or Wraparound
Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the filemap_map_pages() function in the mm/filemap.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the filemapmappages function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Vulnerability of functions udma_check_tx_completion(), udma_ring_irq_handler(), udma_udma_irq_handler(), and udma_tx_status() in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine. This vulnerability allows an attacker to cause a service failure.
The vulnerabilities of the functions udmachecktxcompletion, udmaringirqhandler, udmaudmairqhandler, and udmatxstatus in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine are related to integer overflows. Exploitation of these vulnerabilities could allow an attacker to cause a...
The vulnerability of the ncm_unwrap_ntb() function in the driver/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sev_pin_memory() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.
The vulnerability of the sevpinmemory function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the __clk_rcg2_configure() function in the drivers/clk/qcom/clk-rcg2.c driver module of the Linux kernel’s software synchronization driver allows a attacker to cause a system failure.
The vulnerability of the clkrcg2configure function in the drivers/clk/qcom/clk-rcg2.c driver for Linux kernel-based system software synchronization allows for integer overflow attacks. Exploiting this vulnerability could enable an attacker to cause a system failure...
EulerOS Virtualization 2.13.1 : python-pillow (EulerOS-SA-2026-3192)
According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...
EulerOS Virtualization 2.13.0 : python-pillow (EulerOS-SA-2026-3232)
According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...
Linux Distros Unpatched Vulnerability : CVE-2026-52492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)
The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...
PT-2026-81118
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.1.0 through 3.2.10 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description An integer overflow occurs during an int32 t multiplication within the unpack sample table function of OpenEXRCore wh...
PT-2026-81783
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in Chromium, which allows a remote attacker to read memory within the sandbox by using a specially crafted file. Recommendations Update Google Chrome to versi...
CVE-2026-52491: Integer Overflow or Wraparound
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...
CVE-2026-59982: Integer Overflow or Wraparound
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...
CVE-2026-54920: Integer Overflow or Wraparound
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...
Oracle Linux 10 : python-pyasn1 (ELSA-2026-59243)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59243 advisory. 0.6.2-1.1 - Fix CVE-2026-59886: prevent overflow in Real.float when converting ASN.1 Real values with large exponents Resolves: RHEL-217904 Tenable has...
EulerOS Virtualization 2.13.1 : lcms2 (EulerOS-SA-2026-3178)
According to the versions of the lcms2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
EulerOS Virtualization 2.13.1 : libssh2 (EulerOS-SA-2026-3181)
According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...
EulerOS Virtualization 2.13.0 : libssh2 (EulerOS-SA-2026-3221)
According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...