https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T19:08:52.068891+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-105959 CVE-2026-105959 — Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation 2026-10-17T19:08:52.069795+00:00

Affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration data.