72683 matches found
EUVD-2026-60262
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...
CVE-2026-71479
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...
CVE-2026-71479
In New API (github.com/QuantumNous/new-api) before 1.0.0-rc.18, user-controlled billing multipliers (n, duration, max_tokens, etc.) lacked upper-bound validation and overflow-safe conversion in common/quota_math.go, causing integer overflow into negative settlement charges that credit attacker ac...
CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...
CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...
CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...
Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service
Summary IBM Storage Defender - Resiliency Service is vulnerable to improper input validation, integer overflow, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message pars...
kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()
A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...
CLSA-2026-1786449735 Fix CVE(s): CVE-2025-43965, CVE-2025-66628, CVE-2026-24485
SECURITY UPDATE: TIM coder integer overflow on 32-bit - debian/patches/CVE-2025-66628.patch: bounds check in coders/tim.c - CVE-2025-66628 SECURITY UPDATE: PCD coder infinite loop on short read - debian/patches/CVE-2026-24485.patch: PCDGetBits guard in coders/pcd.c plus EOFBlob-based Sync-search ...
haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling
A flaw was found in HAProxy. A malicious FastCGI Fast Common Gateway Interface backend can exploit an integer overflow vulnerability in the fcgiconn structure's drl field. This occurs when specific contentLength and paddingLength values cause the drl field to wrap to zero, leading to incorrect...
Important: Red Hat Security Advisory: haproxy security update
An update for haproxy is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2026-74570
A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient size calculations during runlist memory reallocation, which could lead to an integer overflow. An attacker could potentially exploit this to cause memory corruption, leading to system...
CVE-2026-74499
A flaw was found in the kernel's Advanced Linux Sound Architecture ALSA USB audio driver. An integer overflow vulnerability in the sndusbmidiakaioutput function, when processing data from a USB device with a small bulk-OUT endpoint, can lead to an out-of-bounds write in the kernel heap. A local...
kernel: rxrpc: Fix RxGK token loading to check bounds
A flaw was found in the Linux kernel's rxrpc subsystem. An unprivileged local user could exploit an integer overflow vulnerability in the rxrpcpreparsexdryfsrxgk function. This flaw occurs when processing specially crafted key and ticket lengths, causing an incorrect memory allocation size...
CVE-2026-72310
A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious SMB server could exploit an integer overflow vulnerability in the smb2ioctlqueryinfo function's bounds check. By sending a specially crafted response with a large offset, the server can cause the client to read da...
MINI-RMFW-MR97-7XMM
Bulletin has no description...
MINI-G2GV-7VMG-G89F
Bulletin has no description...
MINI-RF24-WJM9-HMPM
Bulletin has no description...
Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to open62541 (CVE-2026-63035, CVE-2026-63362, CVE-2026-63559, CVE-2026-65423 & CVE-2026-15690)
Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to open62541. Vulnerability Details CVEID:CVE-2026-63035 DESCRIPTION: A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial...
PCP: PCP: Denial of Service due to signed integer overflow
A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...