72407 matches found
CVE-2026-112158 MikroTik RouterOS ipt_SAME.ko same_check integer overflow
A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function samecheck of the file iptSAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address thi...
Academy Software Foundation OpenImageIO Digital Error Vulnerability
The Academy Software Foundation’s OpenImageIO versions prior to 3.0.20.0, as well as versions 3.1.15.0 and earlier i.e., 3.1.x series, and 3.2.0.3-beta1 and earlier i.e., 3.2.x series, contain a numerical error vulnerability. This vulnerability stems from an integer overflow in the...
gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions
A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...
gimp: integer overflow when generating a thumbnail preview for a PSD file
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...
Important: Red Hat Security Advisory: gimp:2.8 security update
An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SUSE-SU-2026:4619-1 Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...
dotnet: dotnet: Privilege escalation via integer overflow
A flaw was found in .NET. An integer overflow issue allows an unauthenticated remote attacker to achieve privilege escalation over the network. By convincing a user to process specially crafted input, an attacker can cause a calculation error that leads to unauthorized access with elevated...
emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image
A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...
CVE-2026-112074
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
CVE-2026-112074 Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
EUVD-2026-104056
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
CVE-2026-112074 Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
CVE-2026-112074
A security flaw exists in the Tencent ncnn library (up to version 44b02dabdcf97499281a4692ebd65bad73dcf8b6) within the Conversion API component. Specifically, the function ncnn::yuv420sp2rgb in the file src/mat_pixel.cpp is susceptible to an integer overflow (CWE-190, CWE-189). This vulnerability...
CVE-2026-112074
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
CVE-2026-112074 Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
Linux Distros Unpatched Vulnerability : CVE-2026-112052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in...
UBUNTU-CVE-2026-98731
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix plen overflow in btintelpcierecvframe plen is u16 and computed as HDRSIZE + dlen. For ACL/ISO frames dlen is a 16-bit field, so a value = 0xFFFC wraps the sum, bypassing the "skb-len plen" check and...
UBUNTU-CVE-2026-98829
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments to avoid extralen overflow In ieee80211rxhdefragment, fragment payloads are accumulated into entry-extralen as subsequent fragments arrive: entry-extralen += rx-skb-len; When the final...