EUVD-2026-62431

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...

CVE-2026-65610

nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...

CVE-2026-65610

nnn (a terminal file manager) is affected by a numeric truncation error in its handling of the HOME environment variable. The homelen variable is stored as uchar_t (range 0–255); when an attacker who can influence the execution environment supplies a HOME path whose length truncates to 0, the exp...

CVE-2026-74256

A flaw was found in the Linux kernel, specifically within its BPF Berkeley Packet Filter and sockmap features. This vulnerability is due to an integer overflow in the bpfmsgpopdata function, where certain calculations can incorrectly wrap around. An attacker with local access could exploit this b...

SUSE-SU-2026:23245-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: Security issues fixed: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. -...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

BIT-POSTGRESQL-2026-14662 PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...

CVE-2026-72352

A flaw was found in the Linux kernel's Human Interface Device HID Berkeley Packet Filter BPF component. An integer overflow, where a calculation exceeds the maximum value an integer type can store, in the hidbpfgetdata function's range check can occur when processing a very large size value. This...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Adobe Lightroom Classic graphic editor, related to integer overflow, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Lightroom Classic graphic editor is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Apache ActiveMQ software-related to integer overflow allows attackers to cause service failures.

The vulnerability of Apache ActiveMQ software products is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-74964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...

Oracle Linux 9 : pcp (ELSA-2026-55740)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55740 advisory. - Fix CVE-2026-16524 command injection in linuxsockets PMDA RHEL-213668 - Fix missing pmproxy -Q and -S authentication flags CVE-2026-16527, RHEL-2137...

CVE-2026-17091: Integer Overflow or Wraparound

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...

CVE-2026-16933: Integer Overflow or Wraparound

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16917: Integer Overflow or Wraparound

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...

CVE-2026-16890: Integer Overflow or Wraparound

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...