CVE-2026-71401

An integer underflow in the wicked DHCPv4 packet capture code (function ni_capture_inspect_udp_header() in src/capture.c) allows an unauthenticated attacker on an adjacent network to trigger an out-of-bounds read past the receive buffer in the wickedd-dhcp4 daemon. The IP total length field is no...

USN-8686-1: openCryptoki vulnerabilities

It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. CVE-2026-40253 It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the...

USN-8686-1 opencryptoki vulnerabilities

It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. CVE-2026-40253 It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the...

CVE-2026-14677

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

CVE-2022-50999

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

SUSE-SU-2026:23351-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...

CVE-2026-63384

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system. Mitigation...

CVE-2026-80540

A flaw was found in the Linux kernel's drm/amdgpu component, specifically within the Universal Video Decoder UVD image size calculation. This vulnerability occurs because the minimum image size calculation incorrectly uses width instead of pitch and fails to reject pitch values exceeding 4096. An...

SUSE-SU-2026:23362-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...

CVE-2017-12426

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:12+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:56+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:14+00:00| published-proof-of-concept|...

CVE-2026-80584

A flaw was found in the Linux kernel's s390/qeth component. This vulnerability allows a local attacker to trigger an integer underflow when handling user-supplied buffer lengths in the qethsnmpcommand and qethl3arpquery functions. This can lead to an out-of-bounds write, potentially causing memor...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check ...

CVE-2026-80546

A flaw was found in the Linux kernel's s390/zcrypt component, specifically within the xcrbmsgtotype6cprbmsgx function. This vulnerability is due to insufficient input validation, which can lead to integer overflows during memory allocation and arithmetic operations, as well as a lack of minimum...

SUSE-SU-2026:23326-1 Security update for wget

This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread...

SUSE-SU-2026:23297-1 Security update for wget

This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread...

OPENSUSE-SU-2026:21665-1 Security update for wget

This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread...

EUVD-2026-66499

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatalen without checking a lower bound, then set udataoffset to a fixed...

EUVD-2026-66455

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304...

EUVD-2026-66461

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...