CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70290: Integer Overflow or Wraparound

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

PT-2026-82241

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-79223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium...

CVE-2025-70293

An integer overflow vulnerability exists in Denx U-Boot versions prior to 2026.04 . The flaw is located in the ext4fs_get_bgdtable function, where an incorrect size calculation results in an underallocated buffer. This buffer is subsequently used in a memcpy() operation, which could lead to arbit...

CVE-2026-80584: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatalen without checking a lower bound, then set udataoffset to a fixed...

Linux Distros Unpatched Vulnerability : CVE-2026-79292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute...

CVE-2026-76149: Integer Overflow or Wraparound

CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file...

CVE-2026-79902: Integer Overflow or Wraparound

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

EUVD-2025-210793

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70290

An integer overflow vulnerability exists in the ZFS filesystem support of Denx U-Boot versions prior to 2026.04 . This flaw can be triggered by malformed on-disk metadata , resulting in incorrect memory allocation and subsequent out-of-bounds memory access . This condition may lead to a system cr...

MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4, gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2 (AXSA:2026-1666:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1666:01 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104612 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 la...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093162 advisory. Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impa...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-yajl-ruby (UTSA-2026-093638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093638 advisory. yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104565 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-104807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104807 advisory. Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098898 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098837 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guar...