CVE-2022-35737

CVE-2022-35737 Integer overflow in SQLite3 sqlite3strvappendf function. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 was introduced in SQLite version 1.0.12 and fixed in release 3.39.2, available on July 21, 2022. It is exploitable on 64-bit systems, and exploitability depends on h...

ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

Security update for alloy

This update for alloy fixes the following issues: Security issues fixed: CVE-2026-14362: HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue bsc1271206. CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypa...

SUSE-SU-2026:5202-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

Security update for aliyun-cli

This update for aliyun-cli fixes the following issues: CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283596. CVE-2026-116591: github.com/klauspost/compress/zstd: crafted 27 KB...

SUSE-SU-2026:5195-1 Security update for aliyun-cli

This update for aliyun-cli fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283596. - CVE-2026-116591: github.com/klauspost/compress/zstd: crafted 2...

UBUNTU-CVE-2026-125072

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe in libavcodec/mpegaudiodectemplate.c because initgetbits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing rea...

CVE-2026-125072

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe in libavcodec/mpegaudiodectemplate.c because initgetbits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing rea...

EUVD-2026-120247

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe in libavcodec/mpegaudiodectemplate.c because initgetbits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing rea...

CVE-2026-125072

FFmpeg versions through 9.0.2 are vulnerable to a NULL pointer dereference within the mp_decode_frame() function in libavcodec/mpegaudiodec_template.c. The root cause is that the init_get_bits() failure is ignored following a signed integer overflow . An attacker can exploit this by providing an ...

PT-2026-140986

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp decode frame in libavcodec/mpegaudiodec template.c because init get bits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causin...

Security update for helm

This update for helm fixes the following issues: CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283642. CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from...

SUSE-SU-2026:5119-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283642. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption fr...

ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

[slackware-security] expat

New expat packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.10.0-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Fix denial of service with use of XMLParserReset. Detect...

Security update for cadvisor (important)

openSUSE Security Update: Security update for cadvisor Announcement ID: openSUSE-SU-2026:0365-1 Rating: important References: 1283657 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in latest releases. Vulnerability Details CVEID:CVE-2026-97031 DESCRIPTION: Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could...

Astra Linux – vulnerability in php8.2

The SOAP HTTP client guards its response buffer growth by performing a check that relies on signed integer overflow; this behavior is undefined and is not guaranteed to occur. When this check is removed from optimization, a malicious SOAP server can cause the client to allocate a buffer much...

SUSE CVE-2026-118370

libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow...