73612 matches found
ROS-20261009-73-0530
The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ROS-20261009-73-0081
The vulnerability of the jfs/namei.c component in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-109272
Name of the Vulnerable Software and Affected Versions x64dbg-MCP Server versions prior to 1.2 Description The software exposes debugger functionality over HTTP and listens on 0.0.0.0 by default. In the src/core/mcp server.zig file, the parseContentLength function parses an unbounded Content-Lengt...
PT-2026-109177
Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
PT-2026-109182
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
Apache Thrift Integer Overflow Unauthorized Access
The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
HAProxy drl field Data Compromise
The vulnerability in the drl field of the fcgiconn structure within HAProxy server software is related to an integer overflow. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity and availability of protected information...
Apache Thrift Integer Overflow DoS
The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...
openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22039-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22039-1 advisory. This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...
CVE-2026-107820: Integer Overflow or Wraparound
x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...
CVE-2026-96396: Heap-based Buffer Overflow
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...
CVE-2026-19569: Integer Overflow or Wraparound
dynamicobjectcreate in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as objsizegetotype + size, and for thread stack elements as STACKELEMENTDATASIZEsize a round-up plus fixed overhead, without checking either expression for unsigned...
CVE-2026-107729
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INTMAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is...
CVE-2026-107738
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...
EUVD-2026-95413
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...
EUVD-2026-95402
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...
CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...
CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...
CVE-2026-107730
The multi-format reader SumatraPDF (version 3.7.0.22298 ) contains a signed integer overflow vulnerability in the LitParseHeader() function located in src/LitDoc.cpp . The issue occurs because the software uses signed 32-bit arithmetic to compute the section offset (hdrLen + nPieces * 16) without...
CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...