ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260624-73-0008

The vulnerability in freerdp3 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Docker Plugin System Data Compromise

The vulnerability of Docker’s plugin-based container creation system, Moby Docker Engine, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2026-46101

In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nftbitwise Reject zero shift operands for nftbitwise left and right shift expressions during initialization. The carry propagation logic computes the carry from the adjacent 32-bit word using...

CVE-2026-34549

iccDEV contains an Undefined Behavior in IccUtil.cpp caused by invalid left shift on icUInt32Number when processing a crafted ICC profile. Affects versions prior to 2.3.1.6; the issue is fixed in 2.3.1.6. Public references indicate the UB is reported under UndefinedBehaviorSanitizer. There is no ...

EUVD-2026-17714

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior UB condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issue is reported as invalid left shift...

LoongArch Linux BPF JIT Heap Buffer Overflow DoS

The vulnerability of the buildprologue function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Incorrect Bitwise Shift of Integer

Overview Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer in the zisofs decompression process due to improper validation of the pzlog2bs field from ISO9660 Rock Ridge extensions. An attacker can cause application crashes and service disruption by supplying a...

amdgpu_dm Heap Buffer Overflow DoS

The vulnerability of the dmdmuboutbox1lowirq function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver for AMD graphics cards’ kernel-based Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

NBDKit Plugin Framework Shift Error DoS

The vulnerability of the NBDKit Plugin Framework, a tool for creating NBD servers, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mediatek wireless DoS

The vulnerability of the mt7925mcuhwscan function in the drivers/net/wireless/mediatek/mt76/mt7925/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cau...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Validated AG parameters in dbMount to prevent crashes. Validated dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. The limits are derived from...

EUVD-2022-54679

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is 0x80, it represents a shift value. Make sure that the shift value is not too large before using it NTFS max cluster size is 2MB. Return...

IPerf3 DoS

The vulnerability of the IPerf3 network bandwidth measurement tool is related to a single shift error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

EUVD-2021-7729

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-9825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value. CVE-2016-9825...

Linux Distros Unpatched Vulnerability : CVE-2017-5500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

DEBIAN-CVE-2025-38530

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if 1 options1 & board-irqbits However, it-optionsi is an unchecked int value from userspace, so the shift amount...

AZL-66389 CVE-2025-38530 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if 1 options1 & board-irqbits However, it-optionsi is an unchecked int value from userspace, so the shift amount...

DEBIAN-CVE-2025-38483

In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid / if 1 options1 & 0xdcfc However, it-optionsi is an...