kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

EUVD-2026-78162

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...

RHEL 9 : kernel (RHSA-2026:67470)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67470 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vhost: move vdpa group bound...

RockyLinux 10 : rust (RLSA-2026:67286)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67286 advisory. libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server CVE-2026-53587 Tenable has extracted the preceding description bloc...

PT-2026-93144

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-92475

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

PT-2026-92476

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

PT-2026-92321

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92320

In ReadTileInfo of vp9hwd headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Security Vulnerabilities fixed in Thunderbird 156 — Mozilla

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...

Security Vulnerabilities fixed in Thunderbird 140.16 — Mozilla

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. A maliciously constructed IMAP line could cause an out-of-bounds buffer read. A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respon...

CVE-2026-14986

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

CVE-2026-90826

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...

CVE-2026-14986 Out-of-bounds write in it51xxx I2C target FIFO ISR on oversized write transaction

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

CVE-2026-14986

An out-of-bounds write in the ITE it51xxx I2C driver in Zephyr RTOS (drivers/i2c/i2c_ite_it51xxx.c) occurs when the driver operates as an I2C target in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() copies host-supplied data into a fixed 256-byte buffer but performs its bounds chec...

CVE-2026-90826

GPAC 26.07.0 contains an out-of-bounds read in the gf_node_del function within scenegraph/base_scenegraph.c (component MP4Box ). The flaw is triggered via local execution with low privileges and requires user interaction, resulting in a partial availability impact (denial of service). CVSS 3.1 sc...

CVE-2026-90826 GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...

CVE-2026-90826 GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...

CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...