CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...

CVE-2026-45811

CVE-2026-45811: Buffer Copy without Checking Size of Input in Apache NimBLE's HCI socket transport allows a buffer overflow because the received HCI event might not fit the configured event pool. Affects NimBLE up to version 1.9.0; upgrade to 1.10.0 to fix. Exploitation requires either a misconfi...

EUVD-2026-48584

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...

OESA-2026-3163 gawk security update

The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fixes: Use After Free vulnerability has been found in "io.c" program file of...

OESA-2026-3165 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-3161 gawk security update

The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fixes: Use After Free vulnerability has been found in "io.c" program file of...

OESA-2026-3160 gawk security update

The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fixes: Use After Free vulnerability has been found in "io.c" program file of...

OESA-2026-3113 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A vulnerability was found in GNOME GLib...

OESA-2026-3106 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...

OESA-2026-3104 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...

OESA-2026-3107 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...

OESA-2026-3105 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...

CVE-2026-56392 Heap-based Buffer Overflow in GNU coreutils

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

CVE-2026-16870 Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host. An attacker could exploit this by...

EUVD-2026-48452

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...

SUSE CVE-2026-16461

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

PT-2026-64405

Name of the Vulnerable Software and Affected Versions onnx affected versions not specified Description A heap-buffer-overflow read occurs in the Gemm 7 6::adapt gemm 7 6 function when ConvertVersion processes a model containing a Gemm node with input tensors having fewer than two dimensions. The...

PT-2026-64450

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-52 ImageMagick versions prior to 7.1.2-27 Description Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, which leads to a heap buffer over-write. An integer overflow...

Google Chrome buffer overflow vulnerability (CNVD-2026-30666)

Google Chrome is a web browser developed by Google, offering fast and secure browsing experiences. Google Chrome has a security vulnerability that stems from the Codecs component’s failure to properly handle boundary conditions. Attackers can exploit this vulnerability to achieve sandbox escape...

PT-2026-64281

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description An integer underflow in the Apache NimBLE BASS service occurs due to improper validation when parsing Protocol Data Units PDU for the "Add Source" and "Modify Source" operations. This flaw can...