SUSE CVE-2026-16461

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

PT-2026-64450

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-52 ImageMagick versions prior to 7.1.2-27 Description Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, which leads to a heap buffer over-write. An integer overflow...

PT-2026-64405

Name of the Vulnerable Software and Affected Versions onnx affected versions not specified Description A heap-buffer-overflow read occurs in the Gemm 7 6::adapt gemm 7 6 function when ConvertVersion processes a model containing a Gemm node with input tensors having fewer than two dimensions. The...

PT-2026-64281

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description An integer underflow in the Apache NimBLE BASS service occurs due to improper validation when parsing Protocol Data Units PDU for the "Add Source" and "Modify Source" operations. This flaw can...

Google Chrome buffer overflow vulnerability (CNVD-2026-30666)

Google Chrome is a web browser developed by Google, offering fast and secure browsing experiences. Google Chrome has a security vulnerability that stems from the Codecs component’s failure to properly handle boundary conditions. Attackers can exploit this vulnerability to achieve sandbox escape...

ROS-20260724-73-0046

The vulnerability in ImageMagick 7 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-64279

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description A classic buffer overflow occurs in the HCI socket transport because the system fails to verify if a received HCI event fits within the configured event pool before copying it. Exploitation...

openSUSE 16 Security Update : gawk (openSUSE-SU-2026:21393-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21393-1 advisory. - CVE-2026-40467: use-after-free vulnerability within the dogetlineredir routine could lead to a program crash bsc1271351. - CVE-2026-40468:...

The vulnerability of the MixCoder_Code() function in the XZ Decoder component of the 7-Zip archive processor allows a hacker to execute arbitrary code.

The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the ICON console-based graphic editor ImageMagick’s decoder allows a hacker to trigger a service failure.

The vulnerability of the ICON console-based image editing tool ImageMagick relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the console-based graphic editor ImageMagick lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the encoder in the SF3 console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the SF3 encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerabilities of the `ns_printrrf`, `ns_printrr`, and `fp_nquery` functions in the GNU C Library, allowing attackers to execute arbitrary code

The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in their reliance on buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vulnerability of the planar_decompress_plane_rle() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code.

The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-64448

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-27 Description A heap buffer over-write can occur during the fx operation when a crafted argument is processed. A heap buffer over-write is a memory corruption issue where data is written beyond the boundari...

PT-2026-64416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description A heap out-of-bounds write exists in the native PNG and APNG encoders. A remote attacker can corrupt heap memory by providing a crafted PNG image containing a malicious eXIf chunk. By creating an eXIf...

ROS-20260724-73-0028

The vulnerability in dotnet10.0 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the console-based graphic editor ImageMagick, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2026-48430

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

CVE-2026-50039 Stack-based Buffer Overflow in MZ Automation libIEC61850

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...