PT-2026-85655

In the Linux kernel, the following vulnerability has been resolved: rndis host: add overflow check in rndis rx fixup Add an overflow check to ensure that data offset + data len + 8 does not wrap, which would enable an OOB read of the USB data buffer...

KVM Dirty Ring Buffer Overflow DoS

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacke...

fastrpc_get_args() function Heap Buffer Overflow

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel DMA Length Buffer Overflow DoS

The vulnerability of the dmalength function in the drivers/accel/ethosu/ethosugem.c module of the Linux kernel’s acceleration device driver lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

rtw_is_desired_network Heap Buffer Overflow DoS

The vulnerability of the rtwisdesirednetwork function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the exploitation of integer overflows. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...

Linux kernel module IVPU IPC Buffer Overflow DoS

The vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

MongoDB Integer Overflow

The vulnerability of the MongoDB database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

I2C driver Heap Buffer Overflow DoS

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel __sched_fork() Heap Buffer Overflow DoS

The vulnerability of the schedfork function in the kernel/sched/core.c module related to Linux’s resource management system is associated with integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

TCM kernel Heap Buffer Overflow DoS

The vulnerability of the sbcexecuteunmap function in the drivers/target/targetcoresbc.c driver of the Linux operating system’s TCM kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

komeda_fb_afbc_size_check Heap Buffer Overflow DoS

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

ImageMagick Integer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106190 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106170 advisory. FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memo...

Linux Thunderbolt Property Function Use-After-Free

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to...

Linux kernel crypto af_alg_cmsg_send Heap Buffer Overflow DoS

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.10 (AXSA:2026-1755:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1755:10 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF fil...

perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the JSON parsing process. An attacker can cause the application to terminate unexpectedly by supplying a specially crafted large JSON input, leading to memory corruption and potential denial of service...

CVE-2026-48486

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...