CVE-2026-64951 | Low | 3.5 | 2026-08-12 | A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server proc… |
CVE-2026-17535 | Medium | 6.2 | 2026-08-11 | Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images.
Typi… |
CVE-2026-19025 | | | 2026-08-05 | H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace ran… |
CVE-2026-67302 | Medium | 4.3 | 2026-08-01 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_st… |
CVE-2026-53503 | High | 7.5 | 2026-07-31 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(<matrix>, <columns>, <should_normalize>) filter p… |
CVE-2026-62431 | High | 7.5 | 2026-07-28 | The logic to handle periodic Viridian STIMERs performs a division with an
unchecked user-controlled divisor value, that can be set to zero to cause a #DE
fault. |
CVE-2026-64275 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved:
Input: elan_i2c - prevent division by zero and arithmetic underflow
The Elan I2C touchpad… |
CVE-2026-64236 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
i2c: davinci: fix division by zero on missing clock-frequency
When the 'clock-frequency'… |
CVE-2026-7007 | Medium | 4.6 | 2026-07-24 | The Zephyr ext2 file system validates the on-disk superblock in ext2_verify_disk_superblock() (subsys/fs/ext2/ext2_impl.c) before completing a mount. The valid… |
CVE-2026-10679 | Low | 3.3 | 2026-07-21 | The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->f… |
CVE-2026-61378 | Medium | 5.5 | 2026-07-16 | A divide-by-zero vulnerability in the Productivity Suite allows a local
attacker to cause a division by zero leading to a system crash. |
CVE-2026-14801 | Low | 3.3 | 2026-07-06 | A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file sr… |
CVE-2026-14629 | Medium | 4.3 | 2026-07-04 | A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp/lwp_syscall.c of the component Paramet… |
CVE-2026-36911 | Medium | 5.5 | 2026-07-01 | A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to ca… |
CVE-2026-6683 | Medium | 4.6 | 2026-07-01 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations. Th… |
CVE-2026-47153 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a… |
CVE-2026-47152 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a… |
CVE-2025-55642 | Medium | 6.5 | 2026-06-15 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process function (isomedia/isom_write.c). |
CVE-2025-70100 | Medium | 5.5 | 2026-06-03 | A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of… |
CVE-2026-37232 | High | 8.6 | 2026-06-01 | An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions fill_RRU_Pr… |
CVE-2026-10201 | Low | 3.3 | 2026-06-01 | A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the comp… |
CVE-2026-46184 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
sound: ua101: fix division by zero at probe
Add a missing sanity check for bNrChannels in… |
CVE-2026-46161 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
setup_geo() extracts ne… |
CVE-2026-45889 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
mptcp: do not account for OoO in mptcp_rcvbuf_grow()
MPTCP-level OoOs are physiological w… |
CVE-2026-45841 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
nf_osf_match_one() compute… |
CVE-2026-46470 | Medium | 4.0 | 2026-05-14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not su… |
CVE-2026-46469 | Medium | 4.0 | 2026-05-14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not su… |
CVE-2026-42443 | Low | 3.3 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-zero exists in the UFS/UFS2 filesystem image parser in NanaZ… |
CVE-2026-20881 | Medium | 5.5 | 2026-05-12 | Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivile… |
CVE-2026-42209 | Medium | 6.5 | 2026-05-08 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the F… |
CVE-2026-43411 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
tipc: fix divide-by-zero in tipc_sk_filter_connect()
A user can set conn_timeout to any v… |
CVE-2026-43354 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
iio: proximity: hx9023s: Protect against division by zero in set_samp_freq
Avoid division… |
CVE-2026-43267 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: fix potential zero beacon interval in beacon tracking
During fuzz testing, i… |
CVE-2026-43238 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
Commit 38a6f0865796 ("ne… |
CVE-2026-43182 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
media: ccs: Avoid possible division by zero
Calculating maximum M for scaler configuratio… |
CVE-2026-21996 | Low | 3.3 | 2026-05-01 | An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab() |
CVE-2026-31770 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved:
hwmon: (occ) Fix division by zero in occ_show_power_1()
In occ_show_power_1() case 1, the… |
CVE-2026-31767 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
Stop adjusting t… |
CVE-2026-31618 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
Much like commit 19f953e74356… |
CVE-2026-31605 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
Much like commit 19f953e74356 (… |
CVE-2026-31603 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
staging: sm750fb: fix division by zero in ps_to_hz()
ps_to_hz() is called from hw_sm750_c… |
CVE-2026-33593 | High | 7.5 | 2026-04-22 | A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query. |
CVE-2026-35215 | High | 7.5 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the l… |
CVE-2026-27222 | Medium | 5.5 | 2026-04-14 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could e… |
CVE-2026-31423 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
m2sm() converts a u32 slope to a u6… |
CVE-2026-5747 | High | 7.5 | 2026-04-08 | An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user w… |
CVE-2026-34546 | Medium | 6.2 | 2026-03-31 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefin… |
CVE-2026-23379 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
net/sched: ets: fix divide by zero in the offload path
Offloading ETS requires computing… |
CVE-2026-4603 | Medium | 5.9 | 2026-03-23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigIntege… |
CVE-2026-23266 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: rivafb: fix divide error in nv3_arb()
A userspace program can trigger the RIVA NV3… |
CVE-2026-31884 | Medium | 6.5 | 2026-03-13 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, le… |
CVE-2026-1653 | Medium | 5.5 | 2026-03-11 | A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cau… |
CVE-2026-25169 | Medium | 6.2 | 2026-03-10 | Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. |
CVE-2026-20057 | Medium | 5.8 | 2026-03-04 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote… |
CVE-2026-3383 | Low | 3.3 | 2026-03-01 | A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/box… |
CVE-2026-25799 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV s… |
CVE-2025-15564 | Low | 3.3 | 2026-02-07 | A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The… |
CVE-2025-71006 | Medium | 6.5 | 2026-01-28 | A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2025-71005 | Medium | 6.5 | 2026-01-28 | A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2025-71002 | Medium | 6.5 | 2026-01-28 | A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2025-65887 | Medium | 6.5 | 2026-01-28 | A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input… |
CVE-2026-24826 | | | 2026-01-27 | Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver… |
CVE-2026-21495 | Medium | 5.5 | 2026-01-07 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2… |
CVE-2025-65409 | High | 7.5 | 2025-12-30 | A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as… |
CVE-2025-62594 | Medium | 4.7 | 2025-10-27 | ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service d… |
CVE-2025-61554 | Medium | 5.5 | 2025-10-16 | A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a… |
CVE-2025-39954 | Medium | 5.5 | 2025-10-09 | In the Linux kernel, the following vulnerability has been resolved:
clk: sunxi-ng: mp: Fix dual-divider clock rate readback
When dual-divider clock support w… |
CVE-2025-39916 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved:
mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
When creating… |
CVE-2025-39909 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved:
mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
Patch series… |
CVE-2025-23273 | Low | 2.5 | 2025-09-24 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a spec… |
CVE-2025-35435 | Medium | 4.3 | 2025-09-17 | CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit… |
CVE-2025-39742 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved:
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
The function divides num… |
CVE-2025-38719 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved:
net: hibmcge: fix the division by zero issue
When the network port is down, the queue is… |
CVE-2025-9649 | Low | 3.3 | 2025-08-29 | A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation l… |
CVE-2025-55212 | Low | 3.7 | 2025-08-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry stri… |
CVE-2025-38519 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved:
mm/damon: fix divide by zero in damon_get_intervals_score()
The current implementation al… |
CVE-2025-23321 | High | 7.5 | 2025-08-06 | NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an invalid request. A… |
CVE-2025-54873 | | | 2025-08-06 | RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. RISC packages risc0-zkvm versions 2.0… |
CVE-2025-54581 | High | 7.5 | 2025-07-30 | vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header… |
CVE-2025-38312 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
In fb_find_mode_cvt(), iff mo… |
CVE-2025-38297 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved:
PM: EM: Fix potential division-by-zero error in em_compute_costs()
When the device is of… |
CVE-2025-38205 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
[Why]
If the dummy… |
CVE-2025-38126 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
The stmmac… |
CVE-2025-46158 | Medium | 6.2 | 2025-06-20 | An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitimer` syscall |
CVE-2022-50178 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: 8852a: rfk: fix div 0 exception
The DPK is a kind of RF calibration whose al… |
CVE-2022-50102 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
Since the user can co… |
CVE-2022-50010 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: i740fb: Check the argument of i740_calc_vclk()
Since the user can control t… |
CVE-2022-49978 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: fb_pm2fb: Avoid potential divide by zero error
In `do_fb_ioctl()` of fbmem.c, if c… |
CVE-2025-48754 | Low | 2.9 | 2025-05-24 | In the memory_pages crate 0.1.0 for Rust, division by zero can occur. |
CVE-2025-37937 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved:
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
If dib8000_set_dds()… |
CVE-2025-37896 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved:
spi: spi-mem: Add fix to avoid divide error
For some SPI flash memory operations, dummy b… |
CVE-2025-4637 | | | 2025-05-14 | Divide By Zero vulnerability in davisking dlib allows
remote attackers to cause a denial of service via a crafted file.
.This issue affects dlib: before <19… |
CVE-2025-37850 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved:
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
With CONFIG_COMPILE_TEST &… |
CVE-2025-37771 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Prevent division by zero
The user can set any speed value.
If speed is greate… |
CVE-2025-37770 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Prevent division by zero
The user can set any speed value.
If speed is greate… |
CVE-2025-37769 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm/smu11: Prevent division by zero
The user can set any speed value.
If speed is… |
CVE-2025-37768 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Prevent division by zero
The user can set any speed value.
If speed is greate… |
CVE-2025-37767 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Prevent division by zero
The user can set any speed value.
If speed is greate… |
CVE-2025-37766 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Prevent division by zero
The user can set any speed value.
If speed is greate… |
CVE-2025-37740 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved:
jfs: add sanity check for agwidth in dbMount
The width in dmapctl of the AG is zero, it t… |