CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38345

FFmpeg contains a Division-by-Zero vulnerability within the ff_sws_init_single_context function (located in /libswscale/utils.c) of version N-122528-gdd2976b9e1 . A remote attacker can provide a specially crafted input to trigger this flaw, resulting in a Denial of Service (DoS) where the applica...

Nmap 7.99 Memory Exhaustion

Nmap version 7.99 and earlier contain a loop with an unreachable exit condition in the Packet:parseoptions method of nselib/packet.lua. A remote host that is the target of a scan can exhaust the memory of the scanning Nmap process and terminate it by replying with a packet that carries a...

CVE-2026-26457

The ccoap library (version 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 ) contains a null pointer dereference vulnerability within the coap_dump_msg() function. This flaw is triggered when the software processes COAP messages that include options with zero length . The impact of this vulnerability is...

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-52103

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

UBUNTU-CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

UBUNTU-CVE-2026-80577

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...

CVE-2026-80577 drm/panthor: skip zero-sized firmware sections

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...

EUVD-2026-66492

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...

CVE-2026-80543 s390/zcrypt: Pad trailing CCA or EP11 message with zeros

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

CLSA-2026-1787732471 Fix CVE(s): CVE-2026-43958

SECURITY UPDATE: add safety guards for NULL, bounds, and zero-division checks - debian/patches/CVE-2026-43958.patch: add NULL, bounds, and zero-division safety checks in rrdxport.c, rrdgraph.c, rrdgraphhelper.c and rrddaemon.c - CVE-2026-43958...

CVE-2026-52103

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

CVE-2026-52103

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098881 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098885 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not...