PT-2026-64726

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis rm hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed...

libIEC61850 Integer Overflow Vulnerability

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. An integer underflow vulnerability exists in versions of libIEC61850 prior to 1.4.3, which can be exploited by an attacker to cause a heap buffer overflow, crash an application, or enable remote code...

ALPINE-CVE-2018-7225

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact e.g., an integer overflow via specially crafted VNC packets...