CVE WatchAug 4, 2026

CVE-2022-50167

In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If

CVSS

7.8

High

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Published: Jun 18, 2025 · Last modified: Aug 4, 2026 · CWE-190

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-262026-08-23

Technical description

In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere by forcing 64-bit multiplication. Extract this formula into separate small helper and use it consistently in various places. Speculative-preventing formula utilizing index_mask trick is left as is, but explicit u64 casts are added in both places.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-772197.1 HIG

3.1%

——1GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-read contents are interpreted as pixel color values and rendered on screen.3d CVE-2026-502786.5 MED

16.3%

——5iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing `icSigEmbeddedV5ProfileTag` data with `icSigEmbeddedProfileType` payloads. Version 2.3.2.1 patches the issue. No known workarounds are available.3d CVE-2026-694198.5 HIG

31.0%

——9Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network.3d CVE-2026-186708.2 HIG

41.3%

——12IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.3d CVE-2026-171609.8 CRI

53.3%

——16IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.2d CVE-2026-171597.5 HIG

43.5%

——13IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.3d