PT-2026-90858

Name of the Vulnerable Software and Affected Versions MKVToolNix versions prior to 101.0-2.1 Description A heap buffer overflow exists in the bundled avilib library's ODML superindex parser. This occurs due to integer wraparound in 32-bit arithmetic, where a malicious AVI file containing oversize...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: SDL (UTSA-2023-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003818 advisory. SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP...

Linux Distros Unpatched Vulnerability : CVE-2026-90783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pixman (UTSA-2022-001002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001002 advisory. In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2022-000997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000997 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2024-000296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-000296 advisory. A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification...

Linux Distros Unpatched Vulnerability : CVE-2026-87020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied...

MGASA-2026-0397 Updated librabbitmq packages fix security vulnerabilities

amqpdecodebytes sizet integer overflow bypasses bounds check on 32-bit OOB read. CVE-2026-59986 Heap Buffer Overflow in amqpsendframe When Serializing Oversized AMQPFRAMEBODY. CVE-2026-61547...

Updated librabbitmq packages fix security vulnerabilities

amqpdecodebytes sizet integer overflow bypasses bounds check on 32-bit OOB read. CVE-2026-59986 Heap Buffer Overflow in amqpsendframe When Serializing Oversized AMQPFRAMEBODY. CVE-2026-61547...

SUSE CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

SUSE CVE-2026-89524

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen -= 4 and assocresplen -= 6, both u8, with no lower bound. The aggregate check...

SUSE CVE-2026-89606

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

SUSE CVE-2026-89630

In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the dataoffset bound in isvalidoplockbreak Commit 83bfbd0bb902 "cifs: Remove the RFC1002 header from smbhdr" changed the quantity this bound is measured against. It used to be srv-totalread minus the 4-byte...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via MessageUnpacker.skipValue in msgpack-core/src/main/java/org/msgpack/core/MessageUnpacker.java. An attacker can desynchronize the parser and cause attacker-controlled data to be returned in place of lat...

CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

DEBIAN-CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

UBUNTU-CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

CVE-2026-90473 msgpack-java through 0.9.12 Integer Overflow via MAP32

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

EUVD-2026-76849

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...