github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

CVE-2026-74765

A flaw was found in Net::IDN::Punycode. An integer overflow vulnerability in the encodepunycode function, specifically within the XS backend, allows a remote attacker to cause an out-of-bounds read. By supplying a specially crafted string, an attacker can trigger the overflow, leading to either t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

USN-8831-1: libvirt vulnerabilities

It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-18917 It was discovered that libvirt did not correctly handle symbolic links wh...

USN-8831-1 libvirt vulnerabilities

It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-18917 It was discovered that libvirt did not correctly handle symbolic links wh...

CVE-2026-93789

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local user capable of loading custom firmware to cause a Denial of Service DoS through a system crash. The issue stems from insufficient bounds checking when parsing aligned Type-Length-Value TLV data blocks within...

Security Bulletin: Multiple perl vulnerabilities impact AIX.

Summary Vulnerabilities in Perl could cause Information DisclosureCVE-2026-57432, Heap Buffer OverflowCVE-2026-8376, Regex Validation BypassCVE-2026-13221, Host Validation BypassCVE-2026-19953, Out-of-Bounds Read/Write CVE-2026-15534, Access Control BypassCVE-2026-19487. Vulnerability Details...

CVE-2026-93785

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. An integer truncation issue in the identity mapping key handler allows a local user to supply an oversized key payload that exceeds the maximum supported length limit. This size discrepancy causes subsequent...

CVE-2026-94287

A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption th...

postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...