CVE-2026-107220: Out-of-bounds Read

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

PT-2026-107662

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description An issue exists where the library fails to validate the Min and Max attributes of column ranges loaded from a file against the worksheet column limit. When a crafted worksheet contains an...

PT-2026-107658

Name of the Vulnerable Software and Affected Versions Excelize versions 2.7.1 through 2.11.0 Description An issue exists where the mergeCellsParser function fails to perform a length check on a cached rectangle when encountering an empty ref attribute in a crafted worksheet. This empty slice is...

CVE-2026-19186: Integer Underflow (Wrap or Wraparound)

ieee802154decipherdataframe in subsys/net/l2/ieee802154/ieee802154frame.c computed payloadlen = netpktgetlenpkt - llhdrlen - authtaglen without first checking that the received frame is at least llhdrlen + authtaglen bytes long. All three variables are uint8t, so a frame whose payload is shorter...

ROS-20261007-73-0332

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-107465

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record...

PT-2026-107384

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the X cursor XMC thumbnail loader. When generating a thumbnail for a specially crafted XMC file, the software calculates the pixel buffer size using 32-bit signed arithmetic for...

CVE-2026-106061: Out-of-bounds Read

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

PT-2026-107439

ieee802154 decipher data frame in subsys/net/l2/ieee802154/ieee802154 frame.c computed payload len = net pkt get lenpkt - ll hdr len - authtag len without first checking that the received frame is at least ll hdr len + authtag len bytes long. All three variables are uint8 t, so a frame whose...

CVE-2026-107221: Out-of-bounds Write

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

PT-2026-107437

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TL...

PT-2026-107601

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An out-of-bounds write issue exists in the software. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption...

CVE-2026-78243: Uncaught Exception

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record...

CVE-2026-103416: Out-of-bounds Write

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TL...

CVE-2026-106399

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 all...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 all...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-106284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and...

PT-2026-107599

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An out-of-bounds read issue exists within the software. An out-of-bounds read occurs when the system reads data past the end or before the beginning of the intended buffer, which can lead...

PT-2026-107659

Name of the Vulnerable Software and Affected Versions Excelize versions 2.0.0 through 2.11.0 Description An issue exists in the checkRow function where the size of the target cell slice is determined by the last cell in the XML document order. If a crafted spreadsheet contains a row where a cell...