PT-2026-102912

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description A critical pre-authentication integer underflow allows unauthenticated attackers to execute arbitrary code with root privileges. An integer underflow occurs when an arithmetic...

ROS-20260929-73-0081

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-101279: Integer Overflow or Wraparound

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-95308: Integer Overflow or Wraparound

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

Important: dotnet8.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet8.0 Issue Correction...

PT-2026-102681

Name of the Vulnerable Software and Affected Versions libexpat versions 2.7.2 through 2.8.5 Description An integer overflow occurs in the expat realloc function on 32-bit platforms during the computation of allocation sizes. An attacker can exploit this by providing malicious XML to applications...

Amazon Linux 2 : emacs (ALAS-2026-3944)

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3944 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap...

CVE-2026-63209: Integer Overflow or Wraparound

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently...

PT-2026-102918

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler versions 26.06.0 through 26.08.0 Description An integer overflow occurs in the FoFiTrueType::cvtSfnts function within the fofi/FoFiTrueType.cc file. This issue allows for local execution of an attack. Recommendations Instal...

PT-2026-102929

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler versions prior to 26.09.0 Description An integer overflow occurs in the SplashClip::clipToPath function within the splash/SplashClip.cc file. This issue can be triggered from a local environment. Recommendations Upgrade to...

Important: dotnet10.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Exposure of sensitive information to an...

Important: dotnet9.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet9.0 Issue Correction...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-71973: Integer Overflow or Wraparound

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

PT-2026-102740

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

ROS-20260929-73-0110

The vulnerability of the wavefrontsendsample function in the sound subsystem of the Linux kernel lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-102633: Integer Overflow or Wraparound

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or...

ROS-20260929-73-0049

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ALSA-2026:73511 Moderate: gawk security update

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fixes: gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: gawk: Denial...

Linux Distros Unpatched Vulnerability : CVE-2026-95520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is...