CVE-2026-38350: Integer Overflow or Wraparound

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

ROS-20260828-73-0018

The vulnerability of the fbconsetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-19314: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

Security update for wget (important)

openSUSE security update: security update for wget ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21665-1 Rating: important References: bsc1271033 bsc1271034 bsc1271035 bsc1271036 bsc1271320 bsc1272219 bsc1273449 Cross-References: CVE-2026-15146...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cpio (UTSA-2025-002289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002289 advisory. GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that triggers an...

openSUSE 16 Security Update : liboqs (openSUSE-SU-2026:21634-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21634-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand...

Linux Distros Unpatched Vulnerability : CVE-2026-80710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct...

openSUSE 16: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (openSUSE-SU-2026:21636-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21636-1 advisory. - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot privilege escalatio...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: p11-kit (UTSA-2026-032284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032284 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the...

PT-2026-83228

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description An integer overflow exists in the handling of split-royalty fields. The software validates split royalties by summing them into a uint32 accumulator and checking if the total is within...

CVE-2026-80671: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80671: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

PT-2026-83010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/dasd component where the fmt buffer size variable in the dasd eckd check device format function is declared as an int. When calculating the buffer size using...

CVE-2026-80605: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

PT-2026-86703

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num encaps underflow on bridge VLAN untag The DEV PATH BR VLAN UNTAG case post-decrements info-num encaps inside WARN ON ONCE. num encaps is u8, so if it's already 0 the decrement still happens and wra...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2026-032348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032348 advisory. In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. Tenable has extracted the preceding description block directly fr...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2025-002290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002290 advisory. libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for...

Linux Distros Unpatched Vulnerability : CVE-2026-80671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gmp (UTSA-2026-030646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030646 advisory. GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wayland (UTSA-2025-002252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002252 advisory. An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on...