PT-2026-21476

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow occurs when processing ICO image files within the ico read info and ico read icon functions. This happens because a 32-bit integer evaluation during image buffer size...

PT-2026-26535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An integer overflow in ANGLE within Google Chrome, prior to version 146.0.7680.153, could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTM...

PT-2026-26524

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An integer overflow in the Dawn renderer within Google Chrome on Mac systems could allow a remote attacker to leak cross-origin data. This is achieved through a crafted HTML page...

PT-2026-24123

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the SIXEL decoder that allows an attacker to cause an out-of-bounds write through a specially crafted...

PT-2026-27388

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape is possible due to incorrect boundary...

PT-2026-27744

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-virtme 45 Description The Linux kernel contained a flaw in the ETS scheduler offload path where averaging over the sums of quanta could lead to an integer overflow and subsequent division by zero. This cou...

PT-2026-22623

Name of the Vulnerable Software and Affected Versions Freetype versions 2.13.2 and 2.13.3 Description An integer overflow in the tt var load item variation store function may allow for an out-of-bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. Recommendations...

PT-2026-21475

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSP Paint Shop Pro file parser. A remote attacker can trigger an integer overflow in the read creator block function by providing a specially crafted PSP image file. This...

PT-2026-27389

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape is possible due to incorrect boundary...

PT-2026-21714

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description An integer overflow exists within the Libraries component of NSS. This issue may lead to...

PT-2026-21695

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description An integer overflow exists in the JavaScript: Standard Library component. This issue may allow...

PT-2026-22696

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.28.8 Description Exiv2 is a C++ library and a command-line utility used to read, write, delete, and modify image metadata Exif, IPTC, XMP, and ICC. A flaw exists in the preview component where an integer overflow can...

PT-2026-28803

Name of the Vulnerable Software and Affected Versions tinyproxy versions up to and including 1.11.3 Description An integer overflow in the HTTP chunked transfer encoding parser can lead to a denial of service DoS. The issue arises because chunk size values are parsed without proper overflow...

PT-2026-27393

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description An integer overflow exists within the Graphics component d...

PT-2026-23764

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description This issue is a remote code execution flaw stemming from an integer overflow within the handling of RIFF palette data in AVI files. The problem arises from insufficient validation of...

PT-2026-27440

Name of the Vulnerable Software and Affected Versions libtiff affected versions not specified Description A flaw exists in the libtiff library where a signed integer overflow in the putcontig8bitYCbCr44tile function can be triggered by a specially crafted TIFF file. This can lead to an...

PT-2026-4919

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw exists in GLib related to its Unicode case conversion implementation. An integer overflow can lead to memory corruption when processing specially crafted, large Unicode strings. This...

CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...