263452 matches found
OESA-2026-3104 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...
CVE-2026-56392 Heap-based Buffer Overflow in GNU coreutils
GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...
CVE-2026-56392
GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...
CVE-2026-16870 Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host. An attacker could exploit this by...
EUVD-2026-48452
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
SUSE CVE-2026-16461
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...
Google Chrome buffer overflow vulnerability (CNVD-2026-30666)
Google Chrome is a web browser developed by Google, offering fast and secure browsing experiences. Google Chrome has a security vulnerability that stems from the Codecs component’s failure to properly handle boundary conditions. Attackers can exploit this vulnerability to achieve sandbox escape...
PT-2026-64405
Name of the Vulnerable Software and Affected Versions onnx affected versions not specified Description A heap-buffer-overflow read occurs in the Gemm 7 6::adapt gemm 7 6 function when ConvertVersion processes a model containing a Gemm node with input tensors having fewer than two dimensions. The...
ROS-20260724-73-0046
The vulnerability in ImageMagick 7 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-64450
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-52 ImageMagick versions prior to 7.1.2-27 Description Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, which leads to a heap buffer over-write. An integer overflow...
PT-2026-64281
Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description An integer underflow in the Apache NimBLE BASS service occurs due to improper validation when parsing Protocol Data Units PDU for the "Add Source" and "Modify Source" operations. This flaw can...
PT-2026-64279
Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description A classic buffer overflow occurs in the HCI socket transport because the system fails to verify if a received HCI event fits within the configured event pool before copying it. Exploitation...
The vulnerability of the encoder in the SF3 console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.
The vulnerability of the SF3 encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Vulnerabilities of the `ns_printrrf`, `ns_printrr`, and `fp_nquery` functions in the GNU C Library, allowing attackers to execute arbitrary code
The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in their reliance on buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the MixCoder_Code() function in the XZ Decoder component of the 7-Zip archive processor allows a hacker to execute arbitrary code.
The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the ICON console-based graphic editor ImageMagick’s decoder allows a hacker to trigger a service failure.
The vulnerability of the ICON console-based image editing tool ImageMagick relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Vulnerability of the planar_decompress_plane_rle() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code.
The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the console-based graphic editor ImageMagick lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
openSUSE 16 Security Update : gawk (openSUSE-SU-2026:21393-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21393-1 advisory. - CVE-2026-40467: use-after-free vulnerability within the dogetlineredir routine could lead to a program crash bsc1271351. - CVE-2026-40468:...