EUVD-2026-46185

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

CVE-2026-16461

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

CVE-2026-15370

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...

CVE-2026-15370

CVE-2026-15370 is a vulnerability in libssh where, during SFTP server directory listing, the longname field is built by unsafe string concatenation into a fixed-size stack buffer. This can allow sufficiently long attacker-controlled filenames to overflow the stack, potentially crashing the server...

CVE-2026-15370 Libssh: libssh: stack buffer overflow in sftp server longname construction

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...

EUVD-2026-46169

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...

CVE-2026-15370

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...

Important: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-64088

A flaw was found in the Linux kernel's batman-adv component. An integer overflow vulnerability exists where the 'ttbufflen' variable, intended to be a positive length, can become a negative value. This occurs when a large value is assigned, causing it to wrap around. This incorrect negative value...

ANT-2026-19SGCVZZ · Alembic · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-19SGCVZZ: Heap buffer overflow in Ogawa...

ANT-2026-HFGGE6HR · asterisk/asterisk · stack_buffer_overflow

stack-buffer-overflow critical GHSA-589g-qgf8-m6mx Severity Claude critical · Security research firm critical revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits...

ANT-2026-D7FC4YDQ · rabbitmq-c · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-D7FC4YDQ: Heap-buffer-overflow in rabbitmq-c libFuzz...

ANT-2026-8DRZW7VM · ClamAV · Integer Overflow

integer-overflow high CVE-2026-20215 GHSA-6gff-7f37-2v35 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-8DRZW7VM: Intege...

CVE-2026-64135

A flaw was found in the Linux kernel's pmbus/adm1266 driver. This vulnerability occurs because the adm1266nvmemreadblackbox function uses a small, fixed-size buffer to read data from an I2C Inter-Integrated Circuit device. If the device sends more data than the buffer can hold, it causes a buffer...

ANT-2026-G1XC2M5V · CGIF · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-G1XC2M5V: cgif/cgiffuzzer/20251218020844unknown/ cgif's LZW encoder computes a conservative upper bound for the...

CVE-2026-64085

A flaw was found in the Linux kernel's pmbus/adm1266 driver, which is responsible for hardware monitoring. This vulnerability occurs because the driver does not properly handle data sizes when reading blackbox records from a device. A malicious or malformed device could send more data than...

ANT-2026-QQ2P9M9V · openexr · Heap-buffer-overflow

heap-buffer-overflow high CVE-2026-45696 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-QQ2P9M9V: Heap-buffer-overflow in...

ANT-2026-NQ9DPCK0 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-NQ9DPCK0: Heap-buffer-overflow in hfaopen.cpp:3533 Wh...