UBUNTU-CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

EUVD-2026-100802

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

The software Nix (versions before 2.35.3 ) and Lix (versions before 2.95.4 ) are vulnerable to an integer overflow leading to an out-of-bounds write . This issue occurs during the evaluation of untrusted expressions due to mishandled list allocation . The vulnerability has a base severity score o...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

SUSE CVE-2026-109723

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

SUSE CVE-2026-109730

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CLEANSTART-2026-YZ53862 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

CLEANSTART-2026-GT68103 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-good package. GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability...

EUVD-2026-100742

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...

[slackware-security] expat

New expat packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.9.0-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Integer overflow in function expatrealloc on 32bit...

PT-2026-114343

Name of the Vulnerable Software and Affected Versions F´ F Prime versions prior to 4.3.0 Description Range validation in the Svc::FileDownlink SendPartial function is flawed because the addition of startOffset and length is not checked, allowing the range check to be bypassed. This results in a...

CVE-2026-92160: Integer Overflow or Wraparound

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...

CVE-2026-49206: Integer Overflow or Wraparound

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

PT-2026-122395

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gst matroska demux add wvpk header function which allows a heap overwrite while parsing matroska files...

CVE-2026-92158: Integer Overflow or Wraparound

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive stack write validation the bounds check adds attacker-controlled offset and size before memcpy, allowing integer wraparound ...