CVE-2026-93599: Integer Underflow (Wrap or Wraparound)

rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bitstringflags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so rawbits.len - 1 underflows on t...

PT-2026-95389

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the STOMP codec allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted STOMP frame. The issue occurs when the content-length header...

EulerOS Virtualization 2.11.1 : libssh2 (EulerOS-SA-2026-3434)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

CVE-2026-61720: Integer Underflow (Wrap or Wraparound)

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SFMODSIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the...

CVE-2026-91142: Out-of-bounds Write

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

PT-2026-95480

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.19.6 Description An integer overflow occurs in the Op RGB24 32 to YCbCr::convert colorspace function when processing extremely large RGB images created via heif image create and heif image add plane. This overflow...

PT-2026-95319

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description An integer overflow or wraparound issue exists ...

CVE-2026-93311: Integer Overflow or Wraparound

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed...

CVE-2026-93560: Undefined Security Weakness

A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead to an infinite decode loop, causing a Denial of Service DoS by exhausting memo...

PT-2026-95214

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler version 26.07.0 Description A remote attack can trigger an integer overflow in the JBIG2Stream::readCodeTableSeg function within the poppler/JBIG2Stream.cc file. An integer overflow occurs when an arithmetic operation resul...

PT-2026-95215

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler version 26.07.0 Description A remote attack is possible due to an integer overflow in the FoFiTrueType::mapCodeToGID function within the fofi/FoFiTrueType.cc file. This issue occurs when the segCnt argument is manipulated...

PT-2026-95470

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This issue is caused by an integer overflow, which occurs when an arithmetic operation results in...

PT-2026-95463

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can cause a denial of service or potentially escalate privileges. This is possible due to an integer overflow—a condition where an arithmetic operatio...

PT-2026-95613

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This is possible due to an integer overflow, which occurs during the processing of MQINQ requests...

Linux Distros Unpatched Vulnerability : CVE-2026-93314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing ...

Linux Distros Unpatched Vulnerability : CVE-2026-93311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of...

ROS-20260918-73-0021

The vulnerability of the vmloadvmsaveinterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise th...

Intel® Slim Bootloader Advisory

Summary: Potential security vulnerabilities in the Intel® Slim Bootloader may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-28729 Description: Integer overflow in the UEFI...

kernel security, bug fix, and enhancement update

5.14.0-687.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

EulerOS Virtualization 2.11.1 : glib2 (EulerOS-SA-2026-3416)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not...