PT-2026-69689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the tipc recvmsg and tipc recvstream functions. The issue occurs because the min tint, ... macro casts the buflen variable, which is of type size t, to an...

CVE-2026-68098: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

CVE-2026-68270: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the...

PT-2026-69715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq derives the stream count from the parameter length without verifying if the...

ROS-20260810-73-0031

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

Photon OS 5.0: Pixman PHSA-2023-5.0-91-0013

An update of the pixman package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP contains a maliciously corrupted osdmap, out-of-bounds memory...

Linux Distros Unpatched Vulnerability : CVE-2026-71393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length...

Playback Component Firefox Thunderbird Data Compromise

The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

CVE-2026-71392: Integer Overflow or Wraparound

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

CVE-2026-71393: Integer Overflow or Wraparound

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

PT-2026-69446

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An integer overflow exists in the sfnt read name table function within src/sfnt.c. The issue occurs when the function calculates an allocation size using a 32-bit length value...

PT-2026-69445

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An integer overflow exists in the sfnt read cmap format 12 function within src/sfnt.c. On 32-bit builds, an unguarded addition during an xmalloc allocation call can wrap around...

CVE-2026-59088: Integer Overflow or Wraparound

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum intege...

ROS-20260810-73-0029

The vulnerability in libssh2 is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...

PT-2026-69508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vce component. Malicious VCE command streams with oversized dimensions can trigger a 32-bit integer overflow, causing the calculated buffer...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

FreeBSD ioctl Privilege Escalation

The vulnerability of the ioctl request handler CONSHISTORY in FreeBSD operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

SMB Server Buffer Overflow DoS

The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

MiracleLinux 9 : pacemaker-2.1.10-3.el9_8 (AXSA:2026-1502:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1502:03 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description...