GHSA-8W2J-H45M-25MF vulnerabilities

Vulnerabilities for packages: chromium...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-19174 Integer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19167 Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

ECHO-14A1-A31D-6FEE

Bulletin has no description...

PT-2026-80509

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj pi initialise encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2026:3558-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3558-1 advisory. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bi...

TencentOS Server 2: gstreamer-plugins-bad-free (TSSA-2026:0832)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0832 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-19588: Integer Overflow to Buffer Overflow

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

Microsoft Office Integer Overflow RCE

The vulnerability of the Microsoft Office package is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Windows GDI+ Code Execution

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory. - Fix CVE-2026-53705 Orabug: 39822536 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613...

Linux Distros Unpatched Vulnerability : CVE-2026-71261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1...

AlmaLinux 10 : postgresql18 (ALSA-2026:27742)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:27742 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq:...

PT-2026-70977

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

CVE-2026-19001: Integer Overflow or Wraparound

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

Microsoft Outlook Office 365 Apps for Enterprise Code Execution

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

OpenZFS Memory Corruption

The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...

Microsoft .NET Integer Overflow Privilege Escalation

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...