EUVD-2025-211110

Integer overflow in OpenModSim =1.11.0, leading to denial of service...

Ubuntu: (CVE-2026-111380): freerdp3 vulnerability

FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends audinmac.m, audinios.m, which compute the audio queue buffer size as FramesPerPacket 2 nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^...

PT-2026-115386

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.29.0 through 3.31.0 Description An integer overflow exists in the Apple audin backends audin mac.m, audin ios.m. The issue occurs during the calculation of the audio queue buffer size using the formula FramesPerPacket 2...

CVE-2026-111380: Integer Overflow or Wraparound

FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends audinmac.m, audinios.m, which compute the audio queue buffer size as FramesPerPacket 2 nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^...

Microsoft Windows HEVC Video Extensions for Licensed Applications < 2.4.85.0 RCE (October 2026)

The Windows 'HEVC Video Extensions for Licensed Applications' app installed on the remote host is prior to 2.4.85.0. It is, therefore, affected by a remote code execution vulnerability. Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-111380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends audinmac.m, audinios.m, which compute the audio queue buffer size as...

CVE-2025-66969

A denial of service vulnerability exists in OpenModSim versions

CVE-2026-102692: Integer Overflow or Wraparound

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 option values without enforcing the 20-bit maximum block number, allowing block offset multiplication to overflow on...

CVE-2026-62438: Integer Overflow or Wraparound

A flaw was found in GIMP. An attacker can cause a Denial of Service DoS or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive PAA texture file. Due to an integer overflow when calculating image dimensions during file...

Microsoft Windows HEVC Video Extensions from Device Manufacturer < 2.4.86.0 / 2.5.25.0 RCE (October 2026)

The Windows 'HEVC Video Extensions from Device Manufacturer' app installed on the remote host is prior to 2.4.86.0 2.5.25.0 on Windows 11 versions 25H2 and 26H1. It is, therefore, affected by a remote code execution vulnerability. Integer overflow or wraparound in Microsoft Windows Codecs Library...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131727 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the off + sizeofstruct...

Oracle Linux 8 : kernel (ELSA-2026-83157)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83157 advisory. - md/raid5-ppl: fix use-after-free in ppldoflush CKI Backport Bot RHEL-278122 CVE-2026-93262 - svcrdma: Reject Write/Reply chunks with segcount 0 Olga...

Microsoft Windows HEVC Video Extensions < 2.4.87.0 RCE (October 2026)

The Windows 'HEVC Video Extensions' app installed on the remote host is prior to 2.4.87.0. It is, therefore, affected by a remote code execution vulnerability. Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

SUSE CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. Additions in the malloc function may lead to an integer overflow, followed by a heap buffer overflow...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: pcie: Fixed an integer overflow in the iwlwritetouserbuf function. An integer overflow occurs in the iwlwritetouserbuf function, which is called by the iwldbgfsmonitordataread function. The function is as follows: ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: Fix for integer overflow of “credit”. If schfq is configured with “initial quantum” values greater than INTMAX, the first assignment of “credit” will cause signed integer overflow, resulting in a very negative...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: Fixed an integer overflow issue while processing the acdirmax mount option. The user-provided mount parameter acdirmax, of type u32, is intended to have an upper limit. However, before this limit is validated, the value is...

Astra Linux – Vulnerability in poppler, poppler-22

Poppler prior to and including version 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image may lead to a crash or the execution of arbitrary code. This is similar to the vulnerability...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp versions prior to 0.9.21 contain an integer overflow in the xrdpmmprocessrailupdatewindowtext function. There are no known solutions to this issue. Users are...