PT-2026-68883

Name of the Vulnerable Software and Affected Versions p11-kit affected versions not specified Description A local attacker or one with access to a reachable RPC channel can exploit an integer overflow. By sending specially crafted messages, the attacker can cause the system to miscalculate memory...

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

Apple Security Advisory 07-27-2026-7

Apple Security Advisory 07-27-2026-7 - visionOS 26.6 addresses buffer overflow, bypass, code execution, double free, heap corruption, integer overflow, out of bounds access, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities...

PT-2026-69434

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A signed integer overflow occurs in the file-fli plugin when processing FLI image files. The issue stems from an incorrect calculation during memory allocation for image buffers, where multiplyi...

PT-2026-69072

Name of the Vulnerable Software and Affected Versions ClamAV affected versions not specified Description An issue exists in the PESpin file format parser where improper boundary checks for content during scanning can lead to an integer overflow. An unauthenticated remote attacker can exploit this...

Apple Security Advisory 07-27-2026-6

Apple Security Advisory 07-27-2026-6 - watchOS 26.6 addresses buffer overflow, bypass, code execution, double free, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities...

Apple Security Advisory 07-27-2026-5

Apple Security Advisory 07-27-2026-5 - tvOS 26.6 addresses buffer overflow, bypass, code execution, double free, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities...

Apple Security Advisory 07-27-2026-4

Apple Security Advisory 07-27-2026-4 - macOS Sonoma 14.8.8 addresses buffer overflow, bypass, code execution, denial of service, double free, heap corruption, information leakage, integer overflow, out of bounds read, out of bounds write, traversal, and use-after-free vulnerabilities...

CVE-2026-20339: Integer Overflow or Wraparound

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpi...

Apple Security Advisory 07-27-2026-1

Apple Security Advisory 07-27-2026-1 - iOS 26.6 and iPadOS 26.6 addresses buffer overflow, bypass, code execution, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities...

MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1 (AXSA:2026-1479:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1479:03 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...

MiracleLinux 9 : openexr-3.1.1-3.el9_8.3 (AXSA:2026-1493:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1493:05 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial...

CVE-2026-18938: Heap-based Buffer Overflow

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

Apple Security Advisory 07-27-2026-2

Apple Security Advisory 07-27-2026-2 - macOS Tahoe 26.6 addresses buffer overflow, bypass, code execution, denial of service, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, spoofing, traversal, and use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-43627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llamabatchinit function where unchecked multiplications in malloc calls ca...

OpenEXR -- 3.4.14 fixes multiple vulnerabilities

Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security vulnerabilities: CVE-2026-68514: PyOpenEXR deep prefixed literal RGB key collision heap buffer overflow CVE-2026-68513: PyOpenEXR prefixed literal RGB key collision heap buffer overflow CVE-2026-62986: PyOpenEXR de...

DEBIAN-CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-70628

FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard...