CVE-2022-35737

CVE-2022-35737 Integer overflow in SQLite3 sqlite3strvappendf function. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 was introduced in SQLite version 1.0.12 and fixed in release 3.39.2, available on July 21, 2022. It is exploitable on 64-bit systems, and exploitability depends on h...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792751700)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792751700 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len =...

EUVD-2026-107562

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise...

Linux Distros Unpatched Vulnerability : CVE-2026-96641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not...

DEBIAN-CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641

The Pillow Python imaging library is vulnerable to a signed C integer overflow in src/_imaging.c prior to version 13.0.0 . The PILfont text-width accumulation logic fails to check negative glyph advances against INT_MIN, allowing repeated 16-bit advances of -32768 to result in a large positive wi...

CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

PT-2026-120819

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description An issue exists in the PILfont text-width accumulation within src/ imaging.c where positive glyph advances are checked against INT MAX, but negative advances are not checked against INT MIN. Repeatin...

CVE-2026-98095

A flaw was found in the Linux kernel's afpacket network subsystem. When parsing packet headers, user-supplied length values are improperly converted from an unsigned integer to a signed integer. A local user can exploit this vulnerability by submitting an excessively large packet length, causing ...

EUVD-2026-88977

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress...

CVE-2026-98588

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When allocating a socket map with an excessively large entry count, a signed integer overflow occurs during cleanup when the map is released. A local user with permission to create BPF maps can trigger this issue to caus...

openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:22117-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22117-1 advisory. Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable...

Security update for cadvisor (important)

openSUSE security update: security update for cadvisor ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22117-1 Rating: important References: bsc1283657 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

Security update for google-osconfig-agent (important)

openSUSE security update: security update for google-osconfig-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22078-1 Rating: important References: bsc1283672 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

PT-2026-116807

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject max entries INT MAX in sock map alloc sock map alloc only rejects max entries == 0 and otherwise allows any u32 value. sock map free then walks the sks array with a signed int iterator: int i; for i = 0; i...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22057-1 Rating: important References: bsc1281112 bsc1283642 bsc1284104 Cross-References: CVE-2026-63209 CVE-2026-81870 CVE-2026-85732 CVSS scores:...