CVE-2026-61723: Integer Overflow or Wraparound

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues 4 + cbsize without checking whether the multiplication and addition fit in 32 bits. A crafted DLS file can supply a...

CVE-2026-61722: Integer Overflow or Wraparound

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS...

CVE-2026-11378: Integer Overflow or Wraparound

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing...

CVE-2026-84449: Integer Overflow or Wraparound

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, OpRGB2432toYCbCr::convertcolorspace stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heifimagecreate and heifimageaddplane. The resulting wrapped stride caus...

EulerOS Virtualization 2.11.0 : iputils (EulerOS-SA-2026-3510)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo...

EulerOS Virtualization 2.11.1 : iputils (EulerOS-SA-2026-3423)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo...

Linux Distros Unpatched Vulnerability : CVE-2026-90076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: fq: add overflow bounds to quantum and initial quantum fqinit computes quantum = 2 pschedmtu and initialquantum = 10 pschedmtu with no overflow check...

Linux Distros Unpatched Vulnerability : CVE-2026-90246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verifytags bounds check verifytags validates the tagset...

Linux Distros Unpatched Vulnerability : CVE-2026-90141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without...

EulerOS Virtualization 2.11.1 : python-pillow (EulerOS-SA-2026-3463)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

PT-2026-95504

Name of the Vulnerable Software and Affected Versions Cockpit affected versions not specified Description An integer overflow occurs in the do lastlog function during the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds. A low-privileged authenticated user with...

Adobe Photoshop Integer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-40531: Integer Overflow or Wraparound

An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to conduct limited denial-of-service attacks...

PT-2026-95463

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can cause a denial of service or potentially escalate privileges. This is possible due to an integer overflow—a condition where an arithmetic operatio...

CVE-2026-11725: Integer Overflow or Wraparound

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing...

CVE-2026-93314: Integer Overflow or Wraparound

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly...

PT-2026-95214

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler version 26.07.0 Description A remote attack can trigger an integer overflow in the JBIG2Stream::readCodeTableSeg function within the poppler/JBIG2Stream.cc file. An integer overflow occurs when an arithmetic operation resul...

EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2026-3550)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2026-3420)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing...

EulerOS Virtualization 2.11.0 : libssh2 (EulerOS-SA-2026-3521)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...