72115 matches found
PT-2026-67251
Name of the Vulnerable Software and Affected Versions FluidSynth versions 2.5.0 through 2.5.5 Description The native DLS parser fails to verify if the multiplication and addition of the unsigned expression cues 4 + cbsize fit within 32 bits when validating ptbl chunks. An attacker can use a...
Libexif Integer Overflow DoS
The vulnerability of the library for EXIF-file grammar analysis in Libexif is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-64421
Name of the Vulnerable Software and Affected Versions GPU DDK affected versions not specified Description An integer overflow occurs during the calculation of physical offsets for sparse PMRs Partial Memory Regions within the PMRLogicalOffsetToPhysicalOffset function. For PMRs larger than 4 GB,...
CVE-2026-56392: Heap-based Buffer Overflow
GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...
PT-2026-64260
Name of the Vulnerable Software and Affected Versions GNU coreutils affected versions not specified Description The unexpand utility is susceptible to a heap-based buffer overflow caused by an integer overflow during buffer allocation. This occurs when the software processes large values provided...
ROS-20260724-73-0002
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-67250
Name of the Vulnerable Software and Affected Versions FluidSynth versions 2.5.0 through 2.5.5 Description The native DLS parser fails to ensure that the multiplication and addition in the unsigned expression cbsize + connblocks 12 fit within 32 bits when validating articulation chunks. An attacke...
PT-2026-67580
Summary An integer-overflow vulnerability in the frp server's optional SSH Tunnel Gateway lets any unauthenticated remote attacker crash the entire frps process with a single five-byte message. When the gateway parses an SSH exec channel request in pkg/ssh/server.go, it adds a small constant to a...
CVE-2026-16280: Integer Overflow or Wraparound
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in...
CVE-2026-66039: Integer Overflow or Wraparound
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytesperpacket value. Attackers can craft a CAF file with oversized bytesperpack...
PT-2026-64450
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-52 ImageMagick versions prior to 7.1.2-27 Description Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, which leads to a heap buffer over-write. An integer overflow...
ROS-20260724-73-0003
The vulnerability in ImageMagick is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE SLES12 Security Update : gawk (SUSE-SU-2026:3211-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3211-1 advisory. This update for gawk fixes the following issue: - CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Tenable has extracted the...
Debian dla-4698 : spice-vdagent - security update
The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4698 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4698-1 [email protected]...
PT-2026-71712
Name of the Vulnerable Software and Affected Versions frp versions 0.53.0 through 0.70.0 Description The optional SSH Tunnel Gateway in pkg/ssh/server.go incorrectly parses SSH exec channel requests by adding 4 to a four-byte big-endian length controlled by the user. Providing a length of...
CVE-2026-16369
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...
Security update for multipath-tools
This update for multipath-tools fixes the following issues Update to version 0.7.9+238+suse.1249506. kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk image bsc1268145. kpartx: missing bounds check can lead to a DASD VOL1...
Security update for gawk
This update for gawk fixes the following issue: CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...
