CVE-2026-91817: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-96674: Integer Overflow or Wraparound

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...

PT-2026-97389

Name of the Vulnerable Software and Affected Versions PgBouncer versions prior to 1.25.3 Description An integer overflow exists in the packet buffer growth logic. When processing sufficiently large input, the buffer size computation overflows, causing a growth loop that cannot terminate. Since th...

GitLab 19.2 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-93577)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...

ROS-20260923-73-0012

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20260923-73-0063

The vulnerability of the amdgpucspass1 function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can all...

Linux Distros Unpatched Vulnerability : CVE-2026-91728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Gitlab -- vulnerabilities

Gitlab reports: Double Free issue in Regular Expression Parser impacts GitLab CE/EE Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE Cross-site Scripting issue in merge request diff viewer impacts GitLab CE/EE Missing Authorization issue in Duo AI job troubleshooting...

PT-2026-105019

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...

PT-2026-97338

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0 Description A signed integer overflow exists in libavformat/mov.c. In the mov read ispe function, uint32 t width and height values from a crafted HEIF ispe box are stored in signed int fields without bounds checkin...

ROS-20260923-73-0038

The vulnerability of the rununpack function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260923-73-0021

The vulnerability of the drmgemfbinitwithfuncs function in the drivers/gpu/drm/drmgemframebufferhelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploitation of this vulnerability could allow an...

PT-2026-97208

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an...

PT-2026-97236

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read issue occurs during the handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can lead to an integer...

CVE-2026-96611: Integer Overflow or Wraparound

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INTMAX to become negative. In readimagegrid, accumulating these value...

CVE-2026-59980: Uncontrolled Resource Consumption

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

libtiff security update

4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298...

TencentOS Server 4: gegl04 (TSSA-2026:1027)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1027 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RockyLinux 9 : postgresql (RLSA-2026:69607)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69607 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

RockyLinux 10 : postgresql16 (RLSA-2026:70186)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70186 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...