CVE-2026-50161: Integer Overflow or Wraparound

libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websockdecode function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expressi...

PT-2026-77265

Name of the Vulnerable Software and Affected Versions libre versions prior to 4.8.1 Description The websock decode function in src/websock/websock.c contains an integer overflow during the validation of a masked WebSocket frame utilizing 64-bit extended length encoding. When the hdr-len variable ...

PT-2026-80456

Integer overflow in BTF parsing in github.com/cilium/ebpf...

CVE-2026-74977: Integer Overflow or Wraparound

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

Red Hat Security Advisory 2026-55801-03

Red Hat Security Advisory 2026-55801-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55617-03

Red Hat Security Advisory 2026-55617-03 - An update for pcp is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

PT-2026-77152

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64 t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

CVE-2026-50142: Integer Overflow or Wraparound

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heifcontextreadfrommemory with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seqboxes.cc, Boxstsz::parse applies maxsequenceframes only to...

RHEL 10 : haproxy (RHSA-2026:55679)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55679 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102131 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: reject invalid perturb period Gerrard Tai reported that SFQ perturbperiod has n...

Linux Distros Unpatched Vulnerability : CVE-2026-72105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitsetsize overflow on 32bit machines Commit c20e36b7631d dm log: fix...

Linux Distros Unpatched Vulnerability : CVE-2026-74297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1 rqwqeshift based on the user-provided rqwqeshift, which is only check...

AlmaLinux 9 : haproxy (ALSA-2026:55772)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:55772 advisory. haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 haproxy: HAProxy: Response smuggling due to integer overflow in...

PT-2026-77213

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.1 Description An issue exists where the ValueReader.readBytes function in src/main/java/com/rabbitmq/client/impl/ValueReader.java allocates a byte array based on a wire-declared contentLength...

Red Hat Security Advisory 2026-55772-03

Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55802-03

Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

PT-2026-80349

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp...

CVE-2026-62357: Integer Overflow or Wraparound

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

Linux Distros Unpatched Vulnerability : CVE-2026-72226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the si...

AlmaLinux 10 : gstreamer1-plugins-ugly-free (ALSA-2026:55435)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable has...