EUVD-2026-94691

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

The containerd overlaybd component (versions through 1.0.18 ) contains an integer overflow vulnerability in the do_load_index (LSMT index loading) function. This flaw occurs during the processing of index_bytes, potentially leading to an out-of-bounds heap access . The vulnerability can be trigge...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CLEANSTART-2026-OL23592 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...

CVE-2026-39834 affects multiple packages. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. See references for individu...

SUSE SLES16 Security Update : kernel (Live Patch 15 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24016-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24016-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues...

ROS-20261008-73-0299

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ROS-20261008-73-0028

The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

PT-2026-108290

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.7.0.22298 Description In the src/MobiDoc.cpp file, the untrusted unsigned mobiHdr.hdrLen field is narrowed to a signed integer during validation. This allows values exceeding INT MAX to be treated as negative, bypassing th...

PT-2026-108291

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.7.0.22298 Description An issue exists in the LitParseHeader function within src/LitDoc.cpp where the calculation of the section offset using hdrLen and nPieces is performed with signed 32-bit arithmetic without proper...

PT-2026-108143

Name of the Vulnerable Software and Affected Versions MongoDB Go Driver affected versions not specified Description An integer overflow occurs during BSON value-length handling, which can trigger a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticat...

CVE-2026-107324: Integer Overflow or Wraparound

An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process,...

CVE-2026-107446: Integer Overflow or Wraparound

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107730: Integer Overflow or Wraparound

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

EulerOS 2.0 SP15 : perl (EulerOS-SA-2026-3933)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is...

ROS-20261008-73-0207

The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

EulerOS 2.0 SP15 : wget (EulerOS-SA-2026-3958)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22023-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22023-1 advisory. Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization ...

Fedora 44 : chromium (2026-bcdfa4c7db)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcdfa4c7db advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...