UBUNTU-CVE-2026-95520

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-95520

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

EUVD-2026-88733

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-95520

A heap-based buffer overflow vulnerability exists in rpm when parsing untrusted RPM packages. The flaw is triggered when processing a symlink entry where the RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF. This causes an integer overflow in the iterReadArchiveNext() function, shrinking a buffer...

CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

BIT-GITLAB-2026-93577 Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

CVE-2026-101279

A flaw was found in OpenDMARC. A remote attacker can exploit this vulnerability by supplying a crafted Domain-based Message Authentication, Reporting, and Conformance DMARC policy record containing an invalid percentage pct value. This manipulation causes an integer overflow during policy parsing...

CVE-2026-97559

A flaw was found in the Linux kernel's SMB client. An integer overflow during Discretionary Access Control List DACL reconstruction can allow a local user to corrupt file access permissions sent to a remote server. When processing file permission or ownership updates with numerous access control...

DEBIAN-CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

UBUNTU-CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The flaw is located in the DMARC Parser component, specifically within an unknown function in the file libopendmarc/opendmarc_policy.c. The root cause is an integer overflow triggered by the manipulation of ...

EUVD-2026-88594

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

ROS-20260929-73-0168

The vulnerability of the calipsoskbuffsetattr function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0012

The vulnerability of the mtdchar component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

Security Bulletin: NVIDIA DeepStream - September 2026

NVIDIA has released a software update for NVIDIA® DeepStream. To protect your system, clone or update this software to version 9.1.0 or later from NVIDIA/DeepStream on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security...