Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2026-3379)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3379 advisory. A flaw was found in polkit. A regression in the fix for CVE-2026-4897 introduced a stack buffer underflow out-of-bounds read in the readcookie function of the polkit-agent-helper-1 setuid helper. When ...

CVE-2024-22955

swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576...

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

CVE-2024-22562

swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dictforeachkeyvalue at swftools/lib/q.c...

CVE-2026-85498

A flaw in polkit involves an arithmetic error in the authentication agent helper when processing input starting with a null byte. This error causes an integer underflow during buffer length calculation, leading to an out-of-bounds memory read (specifically a stack buffer underflow in the read_coo...

CVE-2026-85498 Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

Astra Linux – vulnerability in vorbis-tools

A buffer underflow vulnerability has been identified in the ogg123 utility within the vorbis-tools 1.4.3 package, specifically in the remotethread function located in remote.c. This vulnerability arises during the remote control functionality when processing malformed input, resulting in a stack...

Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

MGASA-2026-0485 Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...

Rocky Linux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774347657)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774347657 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...

cups-filters:fuzz_cupsfilters_command_to_pclx: Stack-buffer-underflow in cf_v2_legacy_main

Project: https://github.com/OpenPrinting/cups-filters.git Detailed Report: https://oss-fuzz.com/testcase?key=6549021016260608 Project: cups-filters Fuzzing Engine: libFuzzer Fuzz Target: fuzzcupsfilterscommandtopclx Job Type: libfuzzerasancups-filters Platform Id: linux Crash Type:...

OPENSUSE-SU-2026:21997-1 Security update for aria2

This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0 be1caa2d bsc1257934...

Astra Linux – Vulnerability in espeak-ng

It was discovered that Espeak-ng 1.52-dev contains a Stack Buffer Underflow due to the CountVowelPosition function in synthdata.c...

polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

UBUNTU-CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

Linux Distros Unpatched Vulnerability : CVE-2026-85498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underfl...

OPENSUSE-SU-2026:21720-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...