22 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-89568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '...
EUVD-2026-76479
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
mac80211 Stack Heap Buffer Overflow
The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...
Linux netfilter Heap Buffer Overflow DoS
The vulnerability of the nftbitwiseinitshift function in the net/netfilter/nftbitwise.c module of the netfilter component in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...
OESA-2026-2366 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Summary Scriban's expression evaluation contains three distinct code paths that allow an attacker who can supply a template to cause denial of service through unbounded memory allocation or CPU exhaustion. The existing safety controls LimitToString, LoopLimit do not protect these paths, giving...
EUVD-2022-32534
Malicious code in bioql PyPI...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a 32-bit integer shift that could lead to an overflow...
Incorrect Bitwise Shift of Integer
Overview Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer through the ochufftreeunpack function. Remediation There is no fixed version for theora. References - PoC - Red Hat Bugzilla Bug - Vulnerable Code...
kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker
In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in setflicker Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
Integer overflow
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048
CVE-2022-28048 affects the STB library (STB v2.27) in the component stbi__jpeg_decode_block_prog_ac, causing an integer shift of invalid size. The connected records (Astra Linux entry and Gentoo GLSA) corroborate the affected library and version. Gentoo GLSA 2024-09-15 links to the same issue and...
