Chromium: CVE-2026-79215 Integer overflow in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CLSA-2026-1787916987 Fix CVE(s): CVE-2024-33871, CVE-2024-46951, CVE-2024-46953, CVE-2024-46956

SECURITY UPDATE: arbitrary code execution via the opvp Driver parameter - debian/patches/CVE-2024-33871.patch: refuse a Driver change once LockSafetyParams is set, and report the Driver length without the trailing NUL, in contrib/opvp/gdevopvp.c. - CVE-2024-33871 SECURITY UPDATE: unchecked...

CLSA-2026-1787908647 Fix of 8 CVEs

SECURITY UPDATE: ACLs applied to a symbolic link modified the link target instead - debian/patches/CVE-2021-23177.patch: ACLs applied to a symbolic link modified the link target instead - CVE-2021-23177 SECURITY UPDATE: symbolic links followed when changing modes, times, ACLs and flags while...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

CVE-2026-38350

A flaw was found in FFmpeg. An integer overflow vulnerability in the targetswsfuzzer function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the application becoming unresponsive or crashing, impacting its availability. Mitigatio...

CVE-2026-38348

A flaw was found in FFmpeg, specifically within the libswscale/utils.c component. An integer overflow vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This could lead to the application becoming unresponsive or crashing. Mitigati...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2026-38343

A flaw was found in FFmpeg. An integer overflow in the libavfilter/vfscale.c component allows attackers to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is currently available...

CVE-2026-38346

A flaw was found in FFmpeg. An integer overflow vulnerability in the yuv2planeX8c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing, impacting system availability...

CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

AZL-98180 CVE-2026-80671 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80671

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

AZL-98093 CVE-2026-80634 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is u8, so if it's already 0 the decrement still happens and wraps it to...

CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2026-80671

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

CVE-2026-80634

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is u8, so if it's already 0 the decrement still happens and wraps it to...

UBUNTU-CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

UBUNTU-CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...