Skip to content
Threat Feed

Tag

Integer-Overflow

8 briefs RSS
high advisory

Pillow Out-of-Bounds Write Vulnerability in PSD Processing (CVE-2026-42311)

Pillow versions 10.3.0 through 12.1.1 are vulnerable to an out-of-bounds write in PSD image decoding/encoding due to an integer overflow when computing tile extent sums, potentially leading to arbitrary code execution.

Pillow oob-write integer-overflow psd memory-corruption
2r 1t 1c
high advisory

LibRaw Integer Overflow Vulnerability in deflate_dng_load_raw

CVE-2026-20884 is an integer overflow vulnerability in LibRaw's deflate_dng_load_raw function that leads to a heap buffer overflow when processing crafted DNG files.

libraw integer-overflow heap-buffer-overflow cve-2026-20884
2r 1t 1c
high advisory

libp2p-gossipsub Remote Denial of Service via Integer Overflow

A remote, unauthenticated attacker can crash applications using libp2p-gossipsub versions prior to 0.49.4 by sending a crafted PRUNE control message with a near-maximum backoff value, causing an arithmetic overflow during heartbeat processing.

libp2p gossipsub denial-of-service integer overflow rust
2r 1t
high advisory

Tinyproxy HTTP Chunked Encoding Integer Overflow Denial of Service

An integer overflow vulnerability in Tinyproxy's HTTP chunked transfer encoding parser (versions <= 1.11.3) allows an unauthenticated remote attacker to cause a denial of service by sending a crafted chunk size that bypasses validation, leading to resource exhaustion.

tinyproxy denial-of-service integer-overflow cve-2026-3945
2r 1t
high advisory

CVE-2026-4690: Mozilla Firefox, Firefox ESR, and Thunderbird XPCOM Sandbox Escape

A sandbox escape vulnerability, identified as CVE-2026-4690, exists in the XPCOM component of Mozilla Firefox, Firefox ESR, and Thunderbird due to incorrect boundary conditions and an integer overflow, potentially allowing an attacker to execute arbitrary code outside the sandbox.

sandbox escape integer overflow mozilla firefox mozilla thunderbird cve-2026-4690
2r 1t 1i
high advisory

Google Chrome Font Integer Overflow Vulnerability (CVE-2026-4679)

A remote attacker can perform an out-of-bounds memory write on Google Chrome by exploiting an integer overflow in the Fonts component via a crafted HTML page in versions prior to 146.0.7680.165.

cve-2026-4679 chrome integer-overflow memory-corruption
2r 3t
high advisory

cgltf Integer Overflow Vulnerability in Sparse Accessor Validation

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors, allowing attackers to trigger out-of-bounds reads via crafted glTF/GLB files, leading to denial of service and potential memory disclosure.

integer-overflow denial-of-service memory-disclosure glTF cgltf
2r 2t
high advisory

CVE-2026-41445 KissFFT Integer Overflow leads to Heap Buffer Overflow

CVE-2026-41445 is a reported integer overflow vulnerability in the KissFFT library that could lead to a heap buffer overflow.

integer-overflow heap-overflow kissfft
1r 1t 1c