CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

ROOT-OS-DEBIAN-13-CVE-2026-58055 CVE-2026-58055 in nghttp2 - Patched by Root

Root has patched CVE-2026-58055 in the nghttp2 package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-55648

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. An integer overflow vulnerability in the freerdpimagecopyfromicondata function allows a malicious Remote Desktop Protocol RDP server to bypass a bounds check. By sending a specially crafted icon update with large...

CVE-2026-62292

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could craft a malicious HEIF image that, when processed by an application decoding an advertised tile, could lead to an out-of-bounds read. This vulnerability occurs due to an integer overflow during...

CVE-2026-52834

A flaw was found in jxl-grid, a pure Rust implementation of a JPEG XL decoder. On 32-bit platforms, decoding a specially crafted JPEG XL image can lead to an integer overflow in length calculations. This overflow can cause the allocation of a smaller buffer than required, enabling...

CVE-2026-74600

A flaw was found in the Linux kernel's memory management, specifically within the pagetablecheck functionality. An unprivileged local attacker could exploit this by populating a sufficient number of zero mappings. This action could lead to an overflow in the filemapcount, triggering a kernel pani...

CVE-2026-74685

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the ltc4282 driver. When a negative value is passed to the ltc4282writecurr function, an incorrect type cast converts this input into a large positive value. This leads to an integer overflow, causing the current limit to...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

CVE-2026-74679

A flaw was found in the Linux kernel's USB gadget NCM Network Control Model function fncm. A malicious host can exploit an integer overflow vulnerability by supplying a large offset. This overflow causes a signed index variable to become negative, bypassing security checks and leading to an...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in controlupdate size calc In sofipc3controlupdate, the expectedsize calculation uses cdata-numelems provided by the firmware in its arithmetic operations. This could lead to an overfl...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix for hidbpfgetdata’s range check The hidbpfgetdata function returns a pointer to the HID-BPF context data when the offset and size provided by the caller fit within ctx-allocatedsize. The current check adds rdwrbufsi...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: GPU: host1x – Fixed the return value check for iommumapsgtable The commit “iommu: returning the full error code from iommumapsgatomic” changed iommumapsgtable to return an ssizet value in error cases, instead of a sizet value ...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: uaccess: A integer overflow has been fixed in the accessok function. On three architectures, the end of a user’s access is checked against the address limit, without considering the possibility of an overflow. Passing a negative...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added to verify the v4l2bttimings blanking fields in order to avoid integer overflows when the user space passes strange values. However, this...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed integer overflow in amdgpucspass1. The type of size is unsigned int. If size is 0x40000000, there will be an integer overflow. After size = sizeofuint32t, size will become zero, which may lead to referencing...

Astra Linux – Vulnerability in python-cryptography

In the cryptography package for Python before version 3.3.2, certain sequences of update calls to symmetrically encrypt multi-GB values could lead to integer overflows and buffer overflows, as demonstrated by the Fernet class...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...