74619 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-89806
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sysfb: ofdrm: Fix integer overflow in fbsize calculation The framebuffer size calculation fbsize = linebytes height can overflow when both values are large...
Linux Distros Unpatched Vulnerability : CVE-2026-89818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and...
CVE-2026-89927: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock Fix an issue where userspace or the guest can program an Hyper-V synthetic timer to have a deadline in the past via integer overflow, preventing the CPU from making...
Linux Distros Unpatched Vulnerability : CVE-2026-89825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix firmware control interface bounds checks panthorinitcsiface and...
PT-2026-93447
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs during the framebuffer size calculation fb size = linebytes height when both linebytes and height variables contain large values. Because these variables are...
openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21839-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21839-1 advisory. Changes in gimp: - CVE-2026-66757: Fixed signed integer overflow in file-sgi causes the plugin to crash when RLE- compressed SGI images are processed...
CVE-2026-77408: Integer Overflow or Wraparound
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortstr property values to uint8 without first rejecting values longer than 255 bytes. An application that accepts an oversized CorrelationId, ReplyTo, MessageId,...
RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:67930)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67930 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is n...
RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:67882)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67882 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is n...
CVE-2026-89926: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check importwpinfo struct kvmhwbreakpoint::len is a u64 that is fully controlled by user space. This is then assigned to wpinfo-len, which is an int. The bounds check is done on the truncated value while the...
RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:67931)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67931 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is n...
PT-2026-93459
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vcn component during the dec msg buffer count check. When the num buffers variable is set to 0x3FFFFFFF, the calculation 6 + num buffers 4...
PT-2026-93517
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow can occur when the variable exp equals zero. This leads to undefined behavior during the shift operation 1 exp - 1. Recommendations At the moment, there is no...
Linux Distros Unpatched Vulnerability : CVE-2026-89876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefin...
PT-2026-93568
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 Hyper-V synthetic timer emulation where userspace or a guest can program a timer with a deadline in the past by causing an integer overflow. This occurs wh...
PT-2026-93466
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the functions panthor init cs iface and panthor init csg iface perform bounds checks on firmware control interface offsets using 32-bit...
CVE-2026-89818: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...
SUSE CVE-2026-90948
A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...
