PT-2026-96389

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in nd label validate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. nd label validate bounds it against the config area size, but sizeof namespa...

CVE-2026-89606: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

PT-2026-89741

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A flaw in the gst-plugins-good isomp4 plugin occurs when processing specially crafted MP4 or MOV files containing CEA-608 closed-caption data. An integer overflow in 32-bit unsigned...

CVE-2026-88914: Integer Overflow or Wraparound

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

PT-2026-90284

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kho preserved memory reserve function where the size of a preservation is calculated using a 32-bit integer shift operation 1 order + PAGE SHIFT. Because the...

CVE-2026-54240: Integer Overflow or Wraparound

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

PT-2026-90350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the SMB client within the symlink data function. The issue occurs when the ALIGN macro is used to process ErrorDataLength. If ErrorDataLength is near UINT32...

CVE-2026-89568: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107299 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx,...

PT-2026-90137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the IPMB Intelligent Platform Management Bus component where the ipmb write function reads message fields before validating the length byte. This can lead to the reading o...

Linux Distros Unpatched Vulnerability : CVE-2026-88053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses,...

CVE-2026-16174

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-16174

Netskope Endpoint DLP (EPDLP) running on Windows is affected by an integer overflow in the EPDLP process port handling, leading to a kernel pool overflow and memory corruption. Exploitation requires a privileged user to send a crafted message to the EPDLP process port, with the EPDLP module enabl...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

DEBIAN-CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

EUVD-2026-75671

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

CVE-2026-85228

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...