PT-2026-106148

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An integer overflow in the rw t4t update file function within rw t4t.cc can lead to an out-of-bounds write. This issue allows for local escalation of privilege without requiring user...

PT-2026-106152

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A resource exhaustion issue in the qsort function within libufdt sysdeps vendor.c can lead to an out-of-bounds write. This condition allows for local escalation ...

PT-2026-106146

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the wpas handle robust av scs recv action function within robust av.c allows for a possible out-of-bounds write. This condition could enable...

PT-2026-106156

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in the stpropnci process function within stpropnci.cc allows for a possible out-of-bounds write. This condition can be leveraged to...

PT-2026-104688

Name of the Vulnerable Software and Affected Versions ccci affected versions not specified Description A missing bounds check in ccci allows for out-of-bounds write and read operations. This issue may result in local information disclosure, memory corruption, system crashes, or privilege escalati...

PT-2026-104690

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundar...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-104706

Name of the Vulnerable Software and Affected Versions MediaTek MT2718 affected versions not specified Description A missing bounds check in vdec allows for an out-of-bounds write. This condition could enable remote escalation of privilege without requiring additional execution privileges, althoug...

CVE-2026-20519: Out-of-bounds Write

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

PT-2026-104740

A security flaw has been discovered in vgmstream up to r2117. This affects the function parse params/txtp parse of the file src/meta/txtp parser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-104969: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...

PT-2026-104682

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out of bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...

CVE-2026-12171: Inclusion of Functionality from Untrusted Control Sphere

auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...

ALSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

vim security update

8.2.2637-26.0.1.el98.23 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.23 - RHEL-271037 vim: ex command injection via crafted filename in signjump 2:8.2.2637-26.22 - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref...

AlmaLinux 10 : kernel (ALSA-2026:70498)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70498 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry...

RHEL 9 : gimp (RHSA-2026:75575)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75575 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

MiracleLinux 8 : gdb-8.2-20.1.el8_10 (AXSA:2026-1966:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1966:03 advisory. gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

Linux Distros Unpatched Vulnerability : CVE-2026-63266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded...