postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write

A flaw was found in PostgreSQL. An integer overflow in multiple server features allows an unprivileged database user to cause an undersized memory allocation that leads to an out-of-bounds write. This issue allows an attacker to execute arbitrary code as the operating system user running the...

Important: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

ANT-2026-VVPEMVDE · ClamAV · Integer Overflow

integer-overflow high CVE-2026-20213 GHSA-rjvx-x4g3-vr6w Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-VVPEMVDE: Intege...

ANT-2026-8DRZW7VM · ClamAV · Integer Overflow

integer-overflow high CVE-2026-20215 GHSA-6gff-7f37-2v35 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-8DRZW7VM: Intege...

CVE-2026-64089

A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the lastchangesetlen field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this t...

EulerOS Virtualization 2.12.0 : python-pillow (EulerOS-SA-2026-2797)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2743)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...

EulerOS Virtualization 2.10.0 : lcms2 (EulerOS-SA-2026-2855)

According to the versions of the lcms2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2026-2859)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the...

Oracle Linux 10 : hplip (ELSA-2026-39976)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39976 advisory. - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and...

PT-2026-61914

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An integer overflow exists within the Graphics: ImageLib component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that...

PT-2026-61901

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An integer overflow occurs in the Libraries component of NSS due to incorrect boundary conditions. An integer overflow is a condition where an arithmetic operation...

PT-2026-61920

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An integer overflow exists within the Audio/Video: Playback component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that ...

PT-2026-61907

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An integer overflow exists within the Audio/Video component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is outside...

CVE-2026-16408: Integer Overflow or Wraparound

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16369: Integer Overflow or Wraparound

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

PT-2026-61881

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description An integer overflow exists in the JavaScript: WebAssembly component. An integer overflow occu...

CVE-2026-47251: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 commit b97c8b5, PR 1712 introduced an integer overflow in the very security check it added. The check itself can be bypassed, allowing a crafted HEIF file with a VVC track to trigger the same out-of-bounds heap...

CVE-2026-47714: Integer Overflow or Wraparound

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

CVE-2026-16416: Integer Overflow or Wraparound

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...