PT-2026-69750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the carl9170 tx process status function. The issue is caused by an off-by-two error in the bounds check, which uses the comparison i cmd-hdr.len / 2 + 1...

Linux Distros Unpatched Vulnerability : CVE-2026-68350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two,...

CVE-2026-68350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...

PT-2026-69444

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An off-by-one error exists in the gvar table parser within src/sfnt.c. The shared-coordinate index boundary check in the functions sfnt vary simple glyph and sfnt vary compound...

EulerOS 2.0 SP11 : bzip2 (EulerOS-SA-2026-3060)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

Malicious code in bigops-shared-product-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8f6d857df9a0aa674b5354167a3eb1c28634b9e61a9436f19a9ffcb8a8b734 [email protected] ships adapter.js, which is unconditionally loaded via index.js on require. On load it fetches a platform-specific...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 — Baron Samedit Heap-Based Buffer Overflow in...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-20...

Malicious code in consumerweb-creditcollection (npm)

Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependency ltidisafe pinned to an arbitrary tarball URL on a...

MAL-2026-13441 Malicious code in consumerweb-creditcollection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...

Malicious code in consumerweb-creditcollection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...

CLSA-2026-1786007573 Fix CVE(s): CVE-2025-66628, CVE-2026-24485, CVE-2026-25989

SECURITY UPDATE: integer overflow in the TIM image reader - debian/patches/CVE-2025-66628.patch: guard the imagesize computation with HeapOverflowSanityCheckGetSize and reject files claiming more data than the blob holds in ReadTIMImage in coders/tim.c - CVE-2025-66628 SECURITY UPDATE: infinite...

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions reached at least 165 organizations and exposed records belonging to at...

SUSE CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

ldns security update

An update is available for ldns. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ldns packages contain a library with the aim to simplify DNS programming in...

RLSA-2026:49836 Important: ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets. Security Fixes: ldns: ldns: Off-path poisoning attacks due to...

RLSA-2026:50108 Important: ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets. Security Fixes: ldns: ldns: Off-path poisoning attacks due to...

ldns security update

An update is available for ldns. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ldns packages contain a library with the aim to simplify DNS programming in ...

EulerOS 2.0 SP13 : bzip2 (EulerOS-SA-2026-3009)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

RockyLinux 10 : ldns (RLSA-2026:49836)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49836 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block directly...