CVE-2026-54912

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, the two-pass fast interpreter loader in core/iwasm/interpreter/wasmloader.c can make inconsistent constant-table decisions between the sizing pass and the emitting pass. After duplicate constants...

CVE-2026-54912 WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, the two-pass fast interpreter loader in core/iwasm/interpreter/wasmloader.c can make inconsistent constant-table decisions between the sizing pass and the emitting pass. After duplicate constants...

CVE-2026-54914

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, wasipolloneoff in core/iwasm/libraries/libc-wasi/libcwasiwrapper.c validates the output pointer for only one wasieventt, while wasmtimessppolloneoff in...

CVE-2026-112109

Thales SafeNet Authentication Client (SAC) contains a local privilege escalation vulnerability in the SACSrv component. An authenticated, non-administrator local user can trigger a heap-based buffer overflow via the service interface, potentially leading to arbitrary code execution with Local Sys...

CVE-2026-76077

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...

CVE-2026-123151

A flaw was found in the GNU debugger GDB. When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-121995

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

CVE-2026-76077

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to a stack buffer overflow and out-of-bounds read in the XER tokenizer NT() function located in asn1crt/asn1crt_encoding_xer.c. This component is accessed by all XER decode paths. The root cause is the copying of tag charac...

CVE-2026-70659

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::loadimatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entrie...

CVE-2026-122329

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

CVE-2026-122328

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

CVE-2026-123151

A stack buffer overflow vulnerability exists in the GNU debugger (GDB) . When GDB connects to a remote debug target, a malicious target can trigger this overflow while GDB parses the target's replies. This flaw could allow an attacker to crash the GDB process or potentially execute arbitrary code...

CVE-2026-121997

A heap buffer overflow vulnerability exists in the gdbserver 's QTDPsrc packet handler. The flaw arises from a mismatch between a packet's declared source length and its actual data length, which causes the hex2bin function to write beyond the allocated heap buffer. This allows an unauthenticated...

CVE-2026-121995

The GDB client contains a stack buffer overflow in its tracepoint upload handler . The vulnerability occurs when GDB reads beyond the current reply boundary into a stale prior reply within a shared packet buffer. This allows an attacker-controlled debug stub to corrupt stack memory automatically ...

CVE-2026-121994

The GDB client's remote protocol handler is vulnerable to a stack buffer overflow in the fetch_register_using_p function. This occurs because the component decodes a stub's register reply into an alloca-sized buffer without bounding the writes by the register width. An attacker-controlled debug t...

CVE-2026-97371

The network traffic monitoring application ntopng is vulnerable to a stack buffer overflow (write) in the nDPI custom category detection mechanism. The flaw exists in the ndpi_get_custom_category_match function, where a four-byte nDPI protocol-category value is written through a pointer to a two-...

CVE-2026-122328

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) contains a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_wav.c. The issue occurs during the decoding of A-law or mu-law WAV files . An attacker can provide a crafted WAV file that triggers a doubly-of...

CVE-2026-122329

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) is vulnerable to a stack-based buffer overflow within the FetchXLaw() function in src/decoder_aiff.c. This flaw stems from miscalculated output offsets during the expansion of A-law or mu-law samples. An attacker can trigger this by providing ...