72204 matches found
Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps
Summary Multiple vulnerabilities were addressed in IBM Concert Operate version 5.1.9 Vulnerability Details CVEID:CVE-2026-54058 DESCRIPTION: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path,...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
Security update for qemu
This update for qemu fixes the following issue: CVE-2026-3886: QEMU calcimagehostmem Integer Overflow Local Privilege Escalation Vulnerability bsc1268061. Changes for qemu: Bug fixes: target/s390x: Make container ids in SysIB15x 1-based bsc1275490 target/s390x: move @deprecated-props to...
SUSE-SU-2026:3806-1 Security update for qemu
This update for qemu fixes the following issue: - CVE-2026-3886: QEMU calcimagehostmem Integer Overflow Local Privilege Escalation Vulnerability bsc1268061. Changes for qemu: - Bug fixes: target/s390x: Make container ids in SysIB15x 1-based bsc1275490 target/s390x: move @deprecated-props to...
Security Bulletin: Multiple Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition affects WebSphere eXtreme Scale
Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 8 used by WebSphere eXtreme Scale. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after...
Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments
Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...
Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.
Summary IBM java SDK is used by VMware Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...
Multiple vulnerabilities in CorvusSKK
Overview CorvusSKK provided by SASAKI Nobuyuki contains multiple vulnerabilities listed below: Code Injection CWE-94 - CVE-2026-76148 Integer Overflow or Wraparound CWE-190 - CVE-2026-76149 Ryo Shimada of Powder Keg Technologies, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...
CVE-2026-76149
CorvusSKK , a Japanese input method editor, contains an integer overflow vulnerability that may allow malicious data to be written to a dictionary file . The attack vector is local with user interaction required (no privileges needed), resulting in low integrity and availability impact and no con...
SUSE CVE-2026-52492
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
SUSE CVE-2026-59183
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...
SUSE CVE-2026-74256
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 last = start + len; evaluates start + len in 32-bit and wraps before storing it in last. The bounds check if start = offset + l || las...
SUSE CVE-2026-74297
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as "1 rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shi...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...