HPE NonStop Inspect Subsystem buffer error vulnerability

The HPE NonStop Inspect Subsystem T9226L01 ABW and earlier versions contain a buffer error vulnerability stemming from a heap buffer overflow. This vulnerability may corrupt the return execution address and potentially lead to an execution flow redirection...

DEBIAN-CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

file:magic_fuzzer_fd: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=4723196419702784 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerfd Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x76c9286eca33 Cra...

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

CVE-2026-110837

The software FreeRDP 2.0.0 before 3.32.0 contains a heap-based buffer overflow in the freerdp_dsp_decode_mp3 function. This vulnerability specifically affects versions built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF. The root cause is that the right-channel PCM pointer is offset by a byte count t...

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

cmake:cmCMakePresetsFuzzer: Heap-buffer-overflow in cmJSONState::key_after

Project: https://gitlab.kitware.com/cmake/cmake.git Detailed Report: https://oss-fuzz.com/testcase?key=4586943145639936 Project: cmake Fuzzing Engine: afl Fuzz Target: cmCMakePresetsFuzzer Job Type: aflasancmake Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cups-filters:fuzz_cupsfilters_pdf_to_pdf_graph: Heap-buffer-overflow in _pdfioFileSeek

Project: https://github.com/OpenPrinting/cups-filters.git Detailed Report: https://oss-fuzz.com/testcase?key=4578621378068480 Project: cups-filters Fuzzing Engine: libFuzzer Fuzz Target: fuzzcupsfilterspdftopdfgraph Job Type: libfuzzerasancups-filters Platform Id: linux Crash Type:...

CVE-2026-110695

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...

CVE-2026-0318

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...

CVE-2026-110695 turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...

CVE-2026-110695 turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...

CVE-2026-110695

The turboderp ExLlamaV2 library (up to version 0.3.2 ) contains a buffer overflow vulnerability in the Safetensors Tensor Loader component. Specifically, a manipulation of the data_offsets argument within the STFile.get_tensor function in exllamav2/stloader.py can trigger this overflow. This vuln...

CVE-2026-110695 turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...

CVE-2026-110695

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...