SUSE CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

GHSA-CGC5-V3F2-8M2V Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

EUVD-2026-67825

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

CVE-2026-54755

Klever-Go (the Go implementation of the Klever blockchain) contains a uint32 integer overflow in split-royalty validation. Per-entry royalty percentages are decoded without an upper bound, and the validation sum wraps to zero when two crafted values (e.g., 0x80000000 each) overflow uint32, passin...

CVE-2026-54755

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

CVE-2026-54755 Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

CVE-2026-54755 Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

CVE-2026-54755 Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

Chromium: CVE-2026-78950 Integer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79292 Integer overflow in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79215 Integer overflow in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79223 Integer overflow in Chromium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

CVE-2026-38350

A flaw was found in FFmpeg. An integer overflow vulnerability in the targetswsfuzzer function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the application becoming unresponsive or crashing, impacting its availability. Mitigatio...

CVE-2026-38348

A flaw was found in FFmpeg, specifically within the libswscale/utils.c component. An integer overflow vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This could lead to the application becoming unresponsive or crashing. Mitigati...

CVE-2026-38343

A flaw was found in FFmpeg. An integer overflow in the libavfilter/vfscale.c component allows attackers to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is currently available...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2026-38346

A flaw was found in FFmpeg. An integer overflow vulnerability in the yuv2planeX8c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing, impacting system availability...

CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...