CVE-2026-88365

The minimp3 library (commit ea99364f ) is vulnerable to an integer overflow within the mp3dec_skip_id3v1() function. This flaw occurs during the parsing of the APEv2 tag-size field . The vulnerability has a CRITICAL severity score of 9.8 , with potential impacts on confidentiality, integrity, and...

PT-2026-97847

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpack tree parse children can overflow size t an...

CVE-2026-96749: Integer Overflow or Wraparound

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

PT-2026-104865

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat create upcase table When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-96749: Integer Overflow or Wraparound

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-88361

SumatraPDF version 3.6.1 is vulnerable to an integer overflow within the EngineMupdf::BuildPageLabelRec() function. This vulnerability occurs when the software parses PDF PageLabels /Nums entries . The technical details do not specify a direct exploitation path or specific remote impact beyond th...

EUVD-2026-86287

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

ALSA-2026:71586 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

CVE-2026-88372

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

Linux Distros Unpatched Vulnerability : CVE-2026-88350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc. CVE-2026-88350 Note that Nessus relies on the presence...

RHEL 8 : libxml2 (RHSA-2026:71641)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71641 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-100493| An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API within MPack 1.1.1 on 32-bit platforms . The issue occurs in the mpack_tree_parse_children() function when parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count. This causes the page a...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.12.111 and 6.18.53 contain security vulnerabilities. These vulnerabilities arise from the exfatcreateupcasetable function, which, when processing damaged volumes, sets the size of the upcase table to zero, leading to integer overflow and potentially causing...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-97451: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpiexopcode3A1T1R midop Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy...

CVE-2026-97451

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpiexopcode3A1T1R midop Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy...

Security update for corosync (important)

openSUSE security update: security update for corosync ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21887-1 Rating: important References: bsc1278738 bsc1278739 Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4309-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4309-1 advisory. Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing...