Loading story…
CERT Polska disclosed an integer overflow vulnerability in GNU diffutils, tracked as CVE-2026-53910. The issue affects the widely used file-comparison utility suite and was published as a security notice identifying the flaw in the software.
A follow-on report amplified the disclosure and confirmed that the core issue is the integer overflow in GNU diffutils, pointing back to the CERT Polska advisory as the primary source. Organizations using GNU diffutils should review the vendor and CERT guidance, identify affected deployments, and prioritize patching or other mitigations once updates are available.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
CERT Polska reported that an integer overflow vulnerability in GNU diffutils was identified as CVE-2026-53910. A later reference republishes the same disclosure and attributes it to CERT Polska.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CERT Polska disclosed two vulnerabilities in **GNU coreutils**, tracked as `CVE-2026-56391` and `CVE-2026-56392`. The notice identifies the flaws as affecting the widely used GNU core utilities package, a foundational component on many Linux and Unix-like systems, and indicates the issues were reported to CERT Polska for publication. Public reporting on the vulnerabilities remains limited, with the available references providing only the identifiers and confirming that two separate flaws were documented. No technical root cause, affected version range, exploitation details, or mitigation guidance were included in the cited notices, leaving organizations that rely on GNU coreutils to monitor vendor and CERT updates for patch and exposure information.
Jul 24, 2026
A publicly disclosed flaw in **Little CMS 2** (`lcms2`) affects all released versions through `2.18`, where an integer overflow in `CubeSize()` can produce an undersized CLUT allocation and lead to out-of-bounds reads. The bug was reported as a check-after-multiply error and mapped to **CWE-190** and **CWE-125**, with researchers showing that malformed PDFs or ICC profiles could crash applications that rely on `liblcms2` for color processing. The issue was reproduced against stock **Ubuntu 24.04** components and other common builds, impacting **Poppler** tools, `evince-thumbnailer`, `tumblerd`, **Okular**, `cups-filters` `pdftoraster`, **GIMP**, `lcms2` utilities, and **OpenJDK 21**, with additional confirmation on **Temurin 21.0.9** for Windows and Homebrew `little-cms2 2.18`. Researchers also described a limited information disclosure primitive on Linux when **ASLR** is disabled. Although upstream reportedly fixed the flaw on the master branch in February and March 2026, no new release, advisory, or **CVE** had been issued at the time of disclosure, despite a GHSA filing and a MITRE CVE request.
Jun 29, 2026
CERT Polska disclosed three vulnerabilities in **GNU cpio** affecting versions through **2.15**, tracked as `CVE-2026-66484`, `CVE-2026-66485`, and `CVE-2026-66486`. The issues were reported by researchers from the **AFINE Team** and include a **path traversal** flaw during tar extraction, an **uncontrolled memory allocation** bug that can trigger **stack overflow** and **denial of service**, and an **improper output escaping** weakness. The output-handling flaw can allow **forged archive listings** or **terminal escape-sequence injection**, creating opportunities to mislead users or manipulate terminal output. CERT Polska said the vulnerabilities have been addressed in specific upstream commits, while a separate security notice amplified the disclosure and directed users to the CERT advisory for details on the affected GNU cpio software.
Aug 10, 2026