CVE-2026-93545: Out-of-bounds Read

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

PT-2026-105015

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-93541

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-93541: Out-of-bounds Read

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

CVE-2026-94281

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-88358

The simdjson library version 4.6.1 is susceptible to a one-byte out-of-bounds read vulnerability within the dom::parser::parse_unpadded() function. A specially crafted truncated JSON document, where the final structural token closes a nested array or object, can cause json_iterator::walk_document...

PT-2026-104921

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

PT-2026-97984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a malformed Information Element IE buffer can be stored via the SIOCSIWGENIE command in the cfg80211 wext siwgenie function without proper validation. A subsequent...

CVE-2026-93213: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in ofaliasscan stem parser The stem parser tests isdigitend - 1 before checking end start and so reads one byte before the property name when the name is empty or all digits. Check the bound first...

Security update for exiv2 (important)

openSUSE security update: security update for exiv2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21904-1 Rating: important References: bsc1277579 bsc1277591 bsc1277791 Cross-References: CVE-2026-49275 CVE-2026-68546 CVE-2026-68547 CVSS scores:...

Security update for freeipmi (important)

openSUSE security update: security update for freeipmi ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21883-1 Rating: important References: bsc1278719 bsc1278721 bsc1278722 bsc1278724 bsc1278726 bsc1278727 Cross-References: CVE-2026-85504...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...

Security update for libsoup (moderate)

openSUSE security update: security update for libsoup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21871-1 Rating: moderate References: bsc1271401 Cross-References: CVE-2026-12478 CVSS scores: CVE-2026-12478 SUSE : 4.8...

Security update for zstd-jni (important)

openSUSE security update: security update for zstd-jni ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21902-1 Rating: important References: bsc1279953 bsc1279954 bsc1279955 bsc1279956 Cross-References: CVE-2026-87823 CVE-2026-87824 CVE-2026-87825...

PT-2026-97820

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-18857: Out-of-bounds Read

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...

PT-2026-97873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs interface where the proc bus pci read function incorrectly uses capableCAP SYS ADMIN to determine config space read access. This function checks the...

PT-2026-97901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the GUD protocol implementation. The gud connector add tv mode function passes fixed-size TV mode name entries directly to drm mode create tv properties...

PT-2026-97967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the greybus audio component where the gb audio gb get topology function fetches a topology blob based on a size supplied by a module. The gbaudio tplg parse data...