Linux Distros Unpatched Vulnerability : CVE-2026-110247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could...

CVE-2026-91962

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attacker could trick a user into opening a...

libsolv security update

0.7.33-5 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178270 0.7.33-4 - Cope with integer overflow in data size arithmetics in repoaddsolv CVE-2026-9149 RHEL-178267 0.7.33-3 - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian repository CVE-2026-91...

CLSA-2026-1783348552 LibRaw: Fix of CVE-2026-24660

CVE-2026-24660: X3F decoder heap buffer overflow via 32-bit size arithmetic in x3floadhuffman/x3floadtrue; add LIBRAWX3FALLOCLIMITMB cap and convert size math to 64-bit ELSCVE-135086...

CVE-2026-52722

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attacker could trick a user into opening a...