72395 matches found
CVE-2017-7529
CVE-2017-7529 Description Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Source:...
DEBIAN-CVE-2026-96641
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2026-96641
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2026-96641
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2026-96641
The Pillow Python imaging library is vulnerable to a signed C integer overflow in src/_imaging.c prior to version 13.0.0 . The PILfont text-width accumulation logic fails to check negative glyph advances against INT_MIN, allowing repeated 16-bit advances of -32768 to result in a large positive wi...
CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2026-96641
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...
CVE-2025-46817
CVE-2025-46817 – Redis Lua unpack Integer Overflow Potential RCE Redis Lua unpack integer overflow PoC causing stack blow-up and crash on 8.2.1. Overview Redis 8.2.1 ships Lua 5.1 with an unpack implementation that computes the result count using signed integers. Carefully chosen start/end indice...
golang: cmd/compile: possible memory corruption after bound check elimination
A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially...
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update...
golang: cmd/compile: possible memory corruption after bound check elimination
A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially...
CVE-2026-98634
A flaw was found in the Linux kernel's SCSI ZBC Zoned Block Commands driver. This vulnerability can lead to a denial of service DoS when the system attempts to scan a storage device that reports an excessively large number of zones. Due to integer truncation and overflow during zone calculations,...
php: PHP: Archive entry injection via integer overflow in TAR parser
A flaw was found in PHP. An integer overflow vulnerability in the Phar extension occurs when parsing TAR archive headers containing excessively large size fields. An attacker can exploit this issue by supplying a specially crafted archive file to an application that processes TAR archives, causin...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-113681
A flaw was found in OpenImageIO. An integer overflow in the Cineon image parser causes an undersized memory buffer allocation. By tricking a user or application into processing a specially crafted Cineon image file, an attacker can trigger an out-of-bounds memory read and crash the application,...
CVE-2026-112074
A flaw was found in ncnn. An integer overflow vulnerability in the image format conversion component, specifically within the ncnn::yuv420sp2rgb function, allows a remote attacker to cause a Denial of Service DoS or memory corruption. By providing specially crafted image data for conversion, an...
CVE-2017-7529-
CVE-2017-7529-Nginx Range Header Integer Overflow Nginx is an open-source web server widely used as a high-performance web server, reverse proxy, cache server, and more. In Nginx versions up to 1.13.2, an integer overflow vulnerability exists that allows an attacker to manipulate the Range header...