74589 matches found
libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...
Important: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
poppler: Poppler: Remote integer overflow vulnerability
A flaw was found in Poppler. This vulnerability, an integer overflow, occurs within the JBIG2Stream::readCodeTableSeg function when processing specially crafted JBIG2 image data. A remote attacker could exploit this by providing specially crafted input, which may lead to memory corruption. This...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
CLSA-2026-1790251955 Fix CVE(s): CVE-2026-63383, CVE-2026-63384
SECURITY UPDATE: integer overflow in evtagunmarshalheader - debian/patches/CVE-2026-63384.patch: reject payload lengths above INTMAX in eventtagging.c, include/event2/tag.h - CVE-2026-63384 SECURITY UPDATE: out-of-bounds read in decodetaginternal - debian/patches/CVE-2026-63383.patch: bound the t...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
Astra Linux – vulnerability in Chromium
An integer overflow in the Chromecast component within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
An integer overflow in Chromium within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a specially crafted file. Chromium security severity: Low...
Astra Linux – vulnerability in Chromium
Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – vulnerability in Chromium
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Integer overflow in WebRTC in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to read memory within the sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Integer overflow in WebRTC in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Low...
Astra Linux – vulnerability in Chromium
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
libxml2: Fix of 2 CVEs
CVE-2026-86143: reject buffer lengths at or above INTMAX before calling the output write callback to prevent an integer overflow - CVE-2026-86144: propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree so parser flags such as XMLPARSENONET are honoured...