An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash.

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

CVE-2026-45258 是 Linux 内核音频子系统 /dev/dsp 设备驱动中的一个整数溢出漏洞。该漏洞位于 dsp_mmap_single() 函数中，该函数负责验证用户请求的内存映射。具体而言，函数通过将用户提供的偏移量（offset）和长度（length）相加，并与缓冲区大小进行比较来检查映射合法性。然而，这个加法运算存在整数溢出风险：当 offset 和 length 都很大时，它们的和可能溢出回绕为一个较小的值，从而绕过安全检查。随后，该 offset 在转换为缓冲区地址时被从 64 位截断为 32 位，导致实际映射范围超出音频缓冲区，延伸至无关的内核内存区域。由于 /dev/dsp 设备节点默认被世界可访问，任何本地非特权用户均可利用该漏洞触发内核内存的越界读写。攻击者可以读写任意内核内存，进而实现权限提升，可能完全控制系统；或通过破坏内核数据结构导致系统崩溃，造成拒绝服务。该漏洞影响广泛使用 ALSA 声音驱动且包含 /dev/dsp 设备的 Linux 系统。目前暂无公开的利用代码或已知在野利用报告，但鉴于其允许任意内核内存访问，风险极高。建议用户优先应用厂商发布的安全补丁，或禁用 /dev/dsp 设备节点以缓解风险。

CVE-2026-53923 影响 vLLM 推理引擎（版本 0.5.5 至 0.23.1rc0 之前）。漏洞存在于 GGUF 反量化内核（csrc/quantization/gguf/gguf_kernel.cu）中，因张量维度整数截断导致 CUDA 内核仅处理部分元素。输出张量通过 torch::empty 分配完整大小（未初始化内存），但反量化操作只填充了截断后的元素数量，未填充部分保留 GPU 内存中的旧数据。在多租户推理部署环境中，这些残留的 GPU 内存可能包含其他用户推理请求的张量数据，造成信息泄露。攻击者通过设计特定的输入张量维度，可触发该整数截断，使部分输出区域未被覆盖，进而窃取其他租户的模型中间结果或敏感数据。该漏洞已修复于版本 0.23.1rc0。建议受影响用户立即升级至 0.23.1rc0 或更高版本。

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

# Integer Overflow in Avro Decoder ## Summary Several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized `int` before bounds-checking, or summed them with overflow-prone signed-`int` arithmetic. On 32-bit targets (`GOARCH=386`, `arm`, `mips`, `wasm`, etc.), the truncation paths can silently bypass byte-slice limits, select th