Linux Distros Unpatched Vulnerability : CVE-2026-75146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer libavformat/dashdec.c. When a live DASH manifest is refreshed with a startNumber...

EUVD-2026-62583

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer libavformat/dashdec.c. When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the...

UBUNTU-CVE-2026-74275

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxlcancelautoattach In cxlcancelautoattach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxlregionsorttargets if...

CVE-2026-74275

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxlcancelautoattach In cxlcancelautoattach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxlregionsorttargets if...

CVE-2026-74275

The CVE-2026-74275 entry is about the Linux kernel driver cxl/region where cxl_cancel_auto_attach() can access p->targets[] using a potentially negative index cxled->pos. The root cause is that cxled->pos may be set to a negative errno in cxl_region_sort_targets() if cxl_calc_interleave_...

CVE-2026-74275 cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxlcancelautoattach In cxlcancelautoattach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxlregionsorttargets if...

PT-2026-72711

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl cancel auto attach In cxl cancel auto attach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxl region sort targets i...

EUVD-2026-56230

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

UBUNTU-CVE-2026-68154

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-60082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was...

CVE-2026-60082

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent...

CVE-2026-60082

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent...

CVE-2026-60082

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent...

CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent...

CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent...

CVE-2026-60082

The CVE-2026-60082 issue affects Perl DBI prior to 1.651, where the statement handle consistency with the row is not enforced. If the statement handle has no fields but the source row is non-empty, the internal row-buffer helper could read from a negative array index. This can be triggered when a...

PT-2026-58080

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.651 Description Perl DBI fails to enforce statement handle consistency with the row. This occurs when the statement handle contains no fields while the source row is non-empty, causing the internal row-buffer helper to...

PYSEC-2026-921 simplejson before 2.6.1 vulnerable to array index error

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

simplejson before 2.6.1 vulnerable to array index error

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

CVE-2026-57235

A flaw was found in Nokogiri, an XML and HTML library for Ruby. This vulnerability allows an attacker to trigger an out-of-bounds read by providing a specially crafted large negative index to certain methods. This can lead to a denial of service DoS by crashing the application on CRuby, or by...