EUVD-2026-59150

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

CVE-2026-72251

CVE-2026-72251 concerns the Linux kernel netfilter nf_nat_sip path. The issue is a memory-pointer/buffer handling flaw: if skb_ensure_writable() reallocates a cloned/fragmented skb, nf_nat_sip() may not update the destination pointer (dptr ) to the new buffer, risking a stale data pointer and pot...

CVE-2026-73054: Improper Authentication

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...

PT-2026-73025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3-iommufd component where the arm vsmmu vsid to sid function incorrectly assumes a device has exactly one stream. When a device has multiple stream...

PT-2026-73058

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An authentication bypass exists in the WebSocket endpoint due to differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can...

PT-2026-72439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory bug and header corruption issue exists in the SIP NAT helper within the netfilter component. In the nf nat sip function, if a cloned or fragmented socket buffer SKB is reallocat...

PT-2026-73033

Name of the Vulnerable Software and Affected Versions @fastify/multipart versions 5.3.0 through 10.1.0 Description An issue exists in the multipart form-data parser where the plugin clears its internal current-file reference while the underlying stream remains open when the busboy fileSize limit...

PT-2026-72895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmw cmd dma function where the DMA suffix location is calculated without verifying if header-size is sufficient to contain both the cmd-body and the suffix. This...

PT-2026-72633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the subs-opened variable is set before the service interval is validated during the enable process. If an invalid interval is...

EUVD-2026-58183

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568

py-libp2p (Python implementation of libp2p) before 0.7.0 has a yamux handle_incoming() flaw in libp2p/stream_muxer/yamux/yamux.py: it reads a 32-bit DATA frame length with read_exactly() before validating against MAX_WINDOW_SIZE or checking stream_id. A peer completing the Noise handshake can sen...

Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of...

undici: undici: Denial of Service due to orphaned response body in retry handler

A flaw was found in undici. A remote attacker, by controlling a server, could exploit a vulnerability in undici's retry handler. When a server sends an incomplete response body and then a non-retryable status, the original response body can become orphaned and never properly closed. This leads to...

Security Bulletin:Vulnerability in curl affects IBM Netezza Appliance

Summary The curl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-10536 Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree...

PT-2026-70980

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The Intel ALH digital-audio-interface driver contains an issue where the dai alh get properties function in drivers/dai/intel/alh/alh.c fails to validate the range of the caller-supplied strea...

Linux Distros Unpatched Vulnerability : CVE-2026-62996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream:...

SUSE CVE-2026-68316

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is...

CVE-2026-68108

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

CVE-2026-68316

A flaw was found in the Linux kernel's accel: ethosu component. This vulnerability involves incorrect element size accounting during command stream validation. Specifically, the calculation for element sizes of 16, 32, or 64 bits can be too small, and the element size is entirely missing for the...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...