SUSE SLES15 Security Update : kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4513-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4513-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: -...

PT-2026-106724

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.14 Description An integer overflow exists in the Oktalyzer loader OKT doPBOD function. An attacker can exploit this by providing a crafted OKT module where the SLEN chunk wraps the 16-bit numtrk value. This lead...

PT-2026-106912

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description An integer overflow occurs in WebGL, which is a JavaScript API for rendering high-performance interactive 3D and 2D graphics within any compatible web browser. This issue...

PT-2026-107089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An integ...

PT-2026-107004

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow occurs in the Compositing component, which allows a remote attacker to obtain cross-origin data by inducing the user to visit a crafted HTML page. Recommendations...

glibc Vulnerable to Memory Corruption via Heap-Based Buffer Overflow in 'malloc.ca' File (CVE-2026-0861)

Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...

PT-2026-107238

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists in the DirectDraw Surface DDS loader. When processing a specially crafted DDS image, the system uses 32-bit arithmetic to calculate buffer sizes based on widt...

CVE-2026-106062: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface DDS loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written throu...

CVE-2026-106063: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

CVE-2026-105837: Integer Overflow or Wraparound

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791296305)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791296305 advisory. - A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in th...

AlmaLinux 9 : gimp (ALSA-2026:75575)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75575 advisory. gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file CVE-2026-90947 gimp: gimp: heap-based buffer overflow in ICO loader vi...

PT-2026-106694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the mr check range function within the RDMA/rxe component. The function uses wraparound-prone arithmetic to validate that the range iova, iova+length falls...

Linux Distros Unpatched Vulnerability : CVE-2026-98317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: yn...

CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

RockyLinux 10 : libvirt (RLSA-2026:75583)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75583 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buff...

Fedora 45 : chromium (2026-53c8aca50a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-53c8aca50a advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...

PT-2026-106722

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.14 Description An integer overflow exists in the DSM Load function within load dsm.c. This occurs when a DSM module is supplied where the product of numchn and numpat wraps a 16-bit value, leading to a heap buff...

Linux Distros Unpatched Vulnerability : CVE-2026-98365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using...

PT-2026-106500

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Issues exist in the receive encrypted standard function regarding the handling of compound encrypted frames. A stale next buffer pointer can cause a use-after-free condition during error...