CWE-190: Integer Overflow vulnerabilities

CVE-2026-18670 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an integer underflow that could be exploited remotely to cause a denial of service and potentially disclose sensitive information. The vulnerability does not require user interaction or privileges to exploit and has a network attack vector.

CVE-2026-17160 is a critical integer overflow vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. This flaw occurs during size computation and could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17159 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an integer overflow or wraparound condition that could be triggered remotely, leading to a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but can disrupt availability by crashing or destabilizing the affected systems.

CVE-2026-69419 is an integer overflow or wraparound vulnerability in Microsoft Azure Data Manager for Energy. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.5. Microsoft has issued an official fix for this vulnerability and manages remediation for this cloud-hosted service.

A heap-based buffer overflow vulnerability exists in libvips prior to version 8.18.3. The flaw arises from improper scanline validation when processing crafted many-band TIFF images, leading to an integer overflow and unsafe buffer-region calculations. This can cause out-of-bounds reads or writes, potential data disclosure, and likely process crashes. Remote code execution has not been demonstrated but cannot be excluded. The issue is fixed in libvips version 8.18.3.

CVE-2026-63384 is an integer overflow vulnerability in libevent's event_tagging.c prior to versions 2.1.13 and 2.2.2-alpha. The flaw occurs when evtag_unmarshal_header uses evtag_decode_int to decode a uint32 payload length controlled by an attacker, converting it to a signed int. Values exceeding INT_MAX become negative or truncated, leading to a wrapped large allocation request in evtag_unmarshal_string, which can cause a denial of service. This issue is fixed in libevent versions 2.1.13 and 2.2.2-alpha.

CVE-2026-18309 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of APNG files. It allows remote attackers to execute arbitrary code if a user opens a crafted malicious file or visits a malicious page. The flaw arises from improper validation of user-supplied data leading to an integer overflow before buffer allocation.

CVE-2026-18308 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of TIF files. It allows remote attackers to execute arbitrary code by exploiting improper validation of user-supplied data leading to an integer overflow before buffer allocation. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

CVE-2026-18306 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of SGI image files. This flaw allows remote attackers to execute arbitrary code by tricking a user into opening a malicious SGI file or visiting a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data leading to an integer overflow before memory write operations.

CVE-2026-18305 is an integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of TIF files. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious TIF file or visits a malicious page. The vulnerability arises from improper validation of user-supplied data leading to an integer overflow before buffer allocation. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.

CVE-2026-18304 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of TIF files. It allows remote attackers to execute arbitrary code if a user opens a malicious TIF file or visits a malicious page. The flaw arises from improper validation of user-supplied data leading to an integer overflow before buffer allocation.

CVE-2026-18301 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting PSD file parsing. It allows remote attackers to execute arbitrary code by exploiting improper validation of user-supplied data, leading to an integer overflow before buffer allocation. Exploitation requires user interaction, such as opening a malicious PSD file or visiting a malicious page.

CVE-2026-18300 is an integer overflow vulnerability in GIMP 3.2.2 affecting HDR file parsing. It allows remote attackers to execute arbitrary code if a user opens a malicious HDR file or visits a malicious page. The flaw arises from improper validation of user-supplied data leading to an integer overflow before buffer allocation.

Coturn versions prior to 4.15.0 contain an integer overflow vulnerability in the STUN message length parsing function. An unauthenticated remote client can send a specially crafted STUN message with a body-length field between 65520 and 65532, causing a uint16_t length variable to wrap around. This leads to desynchronization of the stream parser and drops the attacking client's connection. Other clients and the server process remain unaffected. The issue is fixed in version 4.15.0.

CVE-2026-16917 is a critical integer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code on the affected systems without any user interaction or privileges. The vulnerability is due to improper handling of integer values leading to overflow or wraparound conditions.

CVE-2026-16890 is an integer overflow or wraparound vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker to obtain sensitive information or cause a denial of service. The vulnerability has a low severity rating with a CVSS score of 3.6.

CVE-2026-17091 is an integer overflow or wraparound vulnerability in IBM PowerVM Hypervisor versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. An attacker with root access to a guest partition can exploit this flaw by issuing a crafted hypervisor call that injects arbitrary data into hypervisor or partition memory. This can cause a crash leading to a full platform reboot and termination of all hosted partitions or memory corruption. The hypervisor restarts automatically, but repeated exploitation may cause sustained availability issues. The vulnerability impacts system integrity and availability.

CVE-2026-16724 is an integer overflow or wraparound vulnerability (CWE-190) in IBM Virtualization Management Interface versions FW1110.00 through FW1110.30, FW1120.00, and FW1060.00 through FW1060.80. An attacker with authenticated administrator-level access can exploit this flaw to cause the Virtualization Management Interface (VMI) to crash. The VMI automatically restarts after a crash, but repeated exploitation could lead to sustained availability issues. The vulnerability has a medium severity rating with a CVSS score of 4.5.

CVE-2026-16852 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an integer overflow or wraparound condition that could be exploited remotely to cause a denial of service (DoS). No confidentiality or integrity impacts are reported. There is no indication of active exploitation in the wild. Patch status is not confirmed from the provided data.

CVE-2026-16661 is a high-severity integer overflow vulnerability in IBM PowerVM Hypervisor service processor mailbox interface. It affects multiple firmware versions including FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can exploit this flaw to execute arbitrary code in the host firmware runtime, potentially gaining full control over the managed system. This leads to confidentiality, integrity, and availability impacts on the affected system.