SUSE CVE-2026-74394

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check immbuf-len is a user-controlled uint32t received from the network. Adding it to immdataoffset without overflow checking allows a malicious initiator to send...

PT-2026-83436

Name of the Vulnerable Software and Affected Versions su-exec versions prior to 0.4 Description The software fails to validate numeric user and group identifiers parsed with the strtol function before assigning them to uid t and gid t types. This allows out-of-range values to be truncated to zero...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001496 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash bucke...

Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-104994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104994 advisory. GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. Th...

Unity Linux 20.1070e Security Update: gawk (UTSA-2026-104943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104943 advisory. Integer overflow vulnerability has been found in builtin.c program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001398 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

Unity Linux 20.1070e Security Update: libarchive (UTSA-2026-104945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104945 advisory. A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryptio...

openSUSE 16 Security Update : wget (openSUSE-SU-2026:21665-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21665-1 advisory. Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...

Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104939 advisory. A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001489 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on rounduppowoftwo to...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002980 advisory. An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue...

GHSA-MRPP-V6PG-P54X klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Summary On the SFT add-quantity path the only supply bound is SFTAddCirculation, which does meta.Circulation += amount with no overflow guard, then checks if meta.Circulation meta.MaxSupply && meta.MaxSupply != 0. If amount overflows int64 and wraps negative, negative MaxSupply is false, the cap...

EUVD-2026-68012

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the libswscale/utils.c process. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted image file. Remediation Upgrade ffmpeg to version 8.1 or higher...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the yuv2planeX8c function in libswscale/output.c. An attacker can trigger a crash or application termination by supplying a specially crafted video file. Remediation Upgrade ffmpeg to version 8.1 or...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the hScale16To19c function. An attacker can trigger a crash or disrupt service by supplying a specially crafted image file. Remediation Upgrade ffmpeg to version 8.1 or higher. References -...