CVE-2026-20489: Out-of-bounds Read

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...

CVE-2026-67977: Uncontrolled Resource Consumption

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

Vulnerability Detection in AArch64 Machine Code Using a Digital Twin

This paper proposes an explainable digital twin for vulnerability detection in AArch64 machine code without access to source code. The digital twin reproduces the concrete execution of a program and preserves the state of registers, processor flags, memory, and live allocated blocks. Each...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-76138

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32 MAX, wrapping t...

CVE-2026-67977

The fprime framework version v4.2.2 is vulnerable to an integer overflow within the Svc::FileDownlink::SendPartial component. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . While the vulnerability is confirmed across multiple sources, the provided...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-20464: Out-of-bounds Write

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

PT-2026-67152

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An integer overflow in the hevc decoder can lead to an out-of-bounds write. This condition may allow a remote actor who has already obtained System privilege to...

PT-2026-76151

An integer overflow vulnerability exists in the deflate dng load raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-49508)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49508 advisory. 1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333 Tenable has extracted th...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

RHEL 8 : hplip (RHSA-2026:48959)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48959 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

RHEL 8 : hplip (RHSA-2026:48960)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48960 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

RHEL 8 : hplip (RHSA-2026:48961)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48961 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

RHEL 7 : postgresql (RHSA-2026:49521)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49521 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow...

ROS-20260803-73-0002

The vulnerability of the RedisBloom data structure module of the Redis database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

gstreamer1-plugins-good security update

1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333...

CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

UBUNTU-CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...