SUSE-SU-2026:3021-1 Security update for uriparser

This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes bsc1262999. - CVE-2026-44927: truncation of ptrdifft to int in various places bsc1264578. - CVE-2026-44928: function famil...

CVE-2026-61371

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

CVE-2026-61371

Microsoft AVML before 0.17.0 is affected. On Unix, it could follow a symlink when opening a destination output path, allowing truncation/overwrite of the symlink target at open-time via O_TRUNC and potentially before full input validation. This is described as a truncation-before-validation issue...

CVE-2026-61371

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

CVE-2026-61371

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

JLSEC-2026-753 A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer...

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

JLSEC-2026-729 wolfSSL's `wc_PKCS7_DecodeAuthEnvelopedData()` does not properly sanitize the AES-GCM authentication...

wolfSSL's wcPKCS7DecodeAuthEnvelopedData does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸...

CVE-2026-55142

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-50357

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-49792

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

CVE-2026-48758

A flaw was found in the @sigstore/core component. The preAuthEncoding function incorrectly uses Node.js 'ascii' encoding when converting Pre-Authentication Encoding PAE strings to bytes. This encoding truncates Unicode characters to their low byte, allowing an attacker to substitute characters in...

Microsoft Word Information Disclosure Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

PT-2026-58585

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which could allow an unauthorized attacker to disclose information locally. This issue enables attackers to obtain...

PT-2026-58340

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally, potentially enabling local privilege...

PT-2026-58164

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally. Additionally, it is reported that remote...

PYSEC-2026-3403 vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

Summary Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels csrc/quantization/gguf/ggufkernel.cu causes partial tensor processing. The output tensor is allocated at full size via torch::empty uninitialized memory, but the dequantize CUDA kernel processes only a truncated...

CVE-2026-15551 Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects...