CVE-2026-63896

A flaw was found in the Linux kernel's USB gadget composite driver. A remote attacker, acting as a malicious USB host, could send a specially crafted GETURL request. This request, with a small wLength value, triggers an integer underflow when calculating the buffer length for a memory copy...

CVE-2026-26199

A flaw was found in HDF5, a library used for managing large datasets. This vulnerability occurs when a specific function, H5Igetname, is called with an invalid size parameter, leading to a buffer underflow. An attacker could exploit this by providing specially crafted input, potentially causing t...

RLSA-2026:42090 Important: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer underflow in...

glib2 security update

An update is available for glib2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and applicatio...

ANT-2026-Z477W54M · ClamAV · Integer Underflow

integer-underflow high CVE-2026-20214 GHSA-86w7-h9x4-hpxv Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-Z477W54M:...

CVE-2026-64102

A flaw was found in the Linux kernel's Soft-iWARP siw component for Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted iWARP Fast Path Data Unit FPDU with a manipulated length field. This manipulation causes an integer underflow, leading to a use-after-free...

PT-2026-61996

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.61 Description Using the -Xtrace option to trace method arguments can lead to a buffer underflow. A buffer underflow occurs when a program reads data from a memory address before the start of the intended...

CVE-2026-16439: Buffer Underwrite

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow...

Amazon Linux 2 : krb5, --advisory ALAS2-2026-3798 (ALAS-2026-3798)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3798 advisory. An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a...

RockyLinux 8 : glib2 (RLSA-2026:42090)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:42090 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from...

EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-2773)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in...

AlmaLinux 9 : glib2 (ALSA-2026:42089)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:42089 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from...

AlmaLinux 8 : glib2 (ALSA-2026:42090)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:42090 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from...

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

DEBIAN-CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

AZL-92850 CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...