74589 matches found
CLSA-2026-1790034077 libxml2: Fix of 2 CVEs
CVE-2026-86143: reject buffer lengths at or above INTMAX before calling the output write callback to prevent an integer overflow - CVE-2026-86144: propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree so parser flags such as XMLPARSENONET are honoured...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in immutable (CVE-2026-59879, CVE-2026-59880)
Summary Multiple vulnerabilities including Prototype Pollution and memory handling flaws in the immutable persistent data structure library CVE-2026-59879, CVE-2026-59880 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 4.3.9. Vulnerability...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
SUSE-SU-2026:23912-1 Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service bsc1262263. - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XM...
SUSE-SU-2026:23894-1 Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service bsc1262263. - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XM...
OPENSUSE-SU-2026:21945-1 Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service bsc1262263. - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XM...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...
kernel: sctp: prevent peer transport count overflow
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. An integer overflow occurs when the transportcount for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer address...
EUVD-2026-85730
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...
DEBIAN-CVE-2026-93577
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...
CVE-2026-93577
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...
ALPINE-CVE-2026-93577
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...
CVE-2026-88351
An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...
CVE-2026-88365
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3decskipid3v1 when parsing the APEv2 tag-size field...
CVE-2026-96749
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2026-88365
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3decskipid3v1 when parsing the APEv2 tag-size field...
PT-2026-97924
Name of the Vulnerable Software and Affected Versions minimp3 version ea99364f Description An integer overflow occurs in the mp3dec skip id3v1 function when the software parses the APEv2 tag-size field. An integer overflow is a condition where an arithmetic operation attempts to create a numeric...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.1. It stems from improper step validation in drm.sysfb.simplifiedrm; the calculated step size is not verified against the INTMAX maximum value, potentially leading to integer overflow...