kernel: smb: client: validate absolute native symlink targets before NT fixups

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

kernel: smb: client: validate absolute native symlink targets before NT fixups

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

kernel: smb: client: validate absolute native symlink targets before NT fixups

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

kernel: smb: client: validate absolute native symlink targets before NT fixups

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

CVE-2025-52099

CVE-2025-52099 an integer overflow in SQLite 3.50.0 A proof-of-concept PoC to trigger an integer overflow in SQLite 3.50.0's setupLookaside function is provided below. This overflow occurs due to unchecked multiplication of sz nBig, which can wrap into a negative value and result in invalid memor...

UBUNTU-CVE-2026-125248

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248

FFmpeg versions 9.0 through 9.0.2 are vulnerable to an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c. This flaw occurs when processing large frames, as it undersizes the float remap GPU buffer . An attacker can exploit this by supplying large GBRPF32 or GBRAPF32 images or videos. ...

CVE-2026-125248 FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

EUVD-2026-120198

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248 FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

PT-2026-141076

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc vulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger...

CVE-2026-125248: FFmpeg: FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c that undersizes the…

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-112060

A flaw was found in rtmpdump. A malicious Real-Time Messaging Protocol RTMP server or an attacker intercepting network communications can exploit this issue by transmitting crafted Action Message Format AMF3 data with oversized string lengths. Because the library fails to properly handle decoding...

ROS-20261105-73-0003

The vulnerability in the skbchecksumhelp function of the IPv4 implementation within the Linux kernel operating system is related to out-of-bounds memory writes. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...

vmwgfx Module Privilege Escalation

The vmwgfx module vulnerability in the Linux kernel is related to out-of-bounds memory writes. Exploitation of this vulnerability may allow an attacker to escalate their privileges...

CLEANSTART-2024-EZ69700 attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled

Security vulnerability affects the firefox-esr package. An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled...

CVE-2026-104067

A flaw was found in Scribus. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to an application crash. The StarView Metafile SVM import plugin fails to verify that bitmap and transparency mask dimensions match when processing files. An attacker could exploit...

CVE-2026-65586 GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control driver and accessed by ...

CVE-2026-65586

The Imagination Technologies Graphics DDK (versions 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, and 26.1 RTM2) contains a resource management error (specifically a Use After Free vulnerability) in its GPU DDK component. The root cause is a missing cleanup reference for an abort c...