CVE-2026-107614

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

MikroTik RouterOS Before 7.24 Integer Underflow

MikroTik RouterOS versions before 7.24 contain a pre-authentication integer underflow in HTTP request body handling that can cause a web management service denial of service and may allow code execution...

PT-2026-112634

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendatio...

Ubuntu 22.04 LTS / 24.04 LTS : openCryptoki vulnerabilities (USN-8686-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8686-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could...

Ubuntu 24.04 LTS / 26.04 LTS : libheif vulnerabilities (USN-8649-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8649-1 advisory. It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker coul...

Microsoft Windows: CVE-2026-83578: Microsoft PowerShell Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Windows PowerShell allows an unauthorized attacker to execute code over a network...

PT-2026-111734

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description A flaw exists in the udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with a value from the IP header controlled by an attacker without...

CVE-2026-65200: Integer Underflow (Wrap or Wraparound)

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An...

Exploit for CVE-2026-84411

CVE-2026-84411 — reproduction & PoC Pre-auth integer underflo...

BusyBox numerical error vulnerability

BusyBox has a numerical error vulnerability. This vulnerability arises from the fact that when processing original DHCP packets, the minimum length is not re-verified. The verified packet length is replaced with a value controlled by the attacker in the IP header. This leads to integer underflow...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 10 and 9 have a buffer error vulnerability. This vulnerability stems from integer underflow in the processing of the getpeername result from the clevis PKCS11 pin library. When an AFUNIX client connects to a data socket without binding an address, it can cause th...

EulerOS 2.0 SP13 : graphite2 (EulerOS-SA-2026-4051)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP11 : graphite2 (EulerOS-SA-2026-4324)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP13 : graphite2 (EulerOS-SA-2026-4142)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP11 : graphite2 (EulerOS-SA-2026-4233)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

Exploit for CVE-2026-84411

CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Ex...

CVE-2026-107794: Integer Underflow (Wrap or Wraparound)

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...

CVE-2013-10076: Integer Underflow (Wrap or Wraparound)

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion...

PT-2026-109646

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av extend av, len-1 . On an empty list, this undeflows, and av extend will allocate an array with 2^32 slots, leading to memory exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-106429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This ca...