CVE-2026-72105

A flaw was found in the Linux kernel's device mapper logging dm-log component. On 32-bit systems, an error in calculating the bitsetsize can cause this variable to wrap around to zero. This incorrect calculation leads to a failure in memory allocation, which can result in a Denial of Service DoS...

CVE-2026-65346

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...

CVE-2026-65346

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...

CVE-2026-65346

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution...

CVE-2026-65346

Apple has addressed an integer overflow vulnerability in the ImageIO framework, which handles image parsing. Processing a malicious image can allow an attacker to perform an integer operation where the result exceeds the allocated memory space, potentially leading to arbitrary code execution on t...

ANT-2026-G7GNYY68 · LibreOffice · Heap Buffer Overflow

heap-buffer-overflow medium CVE-2026-6045 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-G7GNYY68: Heap Buffer Overflow v...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

GHSA-H7RQ-F9GQ-MC8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42946 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-40701 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

GHSA-HGFR-JMPR-2P89 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42946 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

MINI-RJ2C-FQVG-M47V

Bulletin has no description...

ANT-2026-3T6Q6WE9 · mpv · Heap Buffer Overflow

heap-buffer-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3T6Q6WE9: Integer overflow in scaletempo audio filter...

MINI-3C89-59FW-PHPC

Bulletin has no description...

haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling

A flaw was found in HAProxy. A malicious FastCGI Fast Common Gateway Interface backend can exploit an integer overflow vulnerability in the fcgiconn structure's drl field. This occurs when specific contentLength and paddingLength values cause the drl field to wrap to zero, leading to incorrect...

Important: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

gstreamer1-plugins-ugly-free security update

An update is available for gstreamer1-plugins-ugly-free. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework, based on grap...