72204 matches found
CVE-2026-108400
A vulnerability in the Microsoft Windows Codecs Library involving an integer overflow or wraparound allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Specifically, this affects the HEVC Video Extensions component. The vulnerability carries a HIGH base severity...
CVE-2026-110247
A flaw was found in Thunderbird. A remote attacker could exploit an integer overflow in the libmime library to achieve arbitrary code execution or cause a Denial of Service DoS. By sending a sufficiently large email message, an attacker causes buffer size arithmetic to overflow without proper...
CVE-2026-110247 Integer overflow in libmime buffer growth could lead to heap corruption
Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...
CVE-2026-110247
A flaw in the libmime library of Thunderbird allows a remote attacker to exploit an integer overflow during size arithmetic in 32-bit types. By sending a sufficiently large email message without proper overflow checks, an attacker can cause the growth guard to fail open or lead to the buffer bein...
CVE-2026-109964
A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability to achieve arbitrary code execution or trigger an application crash, resulting in a denial of service DoS. By providing a specially crafted PICT image file with manipulated dimension values, an integer overflow occu...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-53161 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM...
CVE-2026-54697
The ConnectBot SSH Client Library (prior to version 0.3.1 ) is vulnerable to an integer overflow and excessive memory allocation in its DER parser. Specifically, DerReader.readLength() fails to safely validate long-form DER length octets before accumulating them into an Int. This allows an attack...
CVE-2026-54697 ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the remaining...
CVE-2026-77093
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...
CVE-2026-90246
A flaw was found in AppArmor within the Linux kernel. An unprivileged user can exploit an integer overflow vulnerability in the verifytags function by crafting a malicious AppArmor policy. This flaw allows an attacker to trigger an out-of-bounds read during policy loading, which could lead to...
CVE-2026-90245
A flaw was found in the Linux kernel's fbdev kyro driver. This vulnerability arises from the calculation of overlay viewport end coordinates using 32-bit unsigned arithmetic. Large input values can cause these calculations to wrap around, resulting in incorrect coordinates being passed to the...
CVE-2026-90200
A flaw was found in the Linux kernel's NTFS3 file system driver. An integer overflow vulnerability exists in the Multi-File Table MFT cluster validation logic. When processing a specially crafted boot sector, the driver fails to properly validate MFT cluster numbers due to an integer overflow...
CVE-2026-90196
A flaw was found in the Linux kernel's Sound Open Firmware SOF component. This vulnerability occurs due to improper validation of topology mixer volume ranges. An attacker could potentially provide malformed volume range values, leading to an integer overflow during memory allocation. This could...
CVE-2026-90141
A flaw was found in the Linux kernel's IP Virtual Server IPVS FTP helper. A remote attacker could exploit an integer overflow vulnerability in the ipvsftpgetaddrport function by sending a specially crafted FTP PASV/EPSV response. This could cause the FTP helper to configure data connections with...
CVE-2026-77093 CvFWD Denial of Service
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...
CVE-2026-77093
Commvault CvFWD is vulnerable to an integer overflow that impacts service availability. Affected installations include CommServe , Webserver , Command Center , MediaAgents , Clients , and HyperScale . To remediate this issue, customers should upgrade to the resolved maintenance release provided b...
CVE-2025-58771
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...
CVE-2025-58771
The AMI APTIOV BIOS contains vulnerabilities where local access can trigger an Integer Overflow or Wraparound (CWE-190). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's confidentiality, integrity, and ava...
