406782 matches found
EUVD-2026-101720
FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...
EUVD-2026-101663
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...
UBUNTU-CVE-2026-95125
libming through 0.4.8 contains a heap buffer overflow in rreadc in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service...
PT-2026-115256
Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A buffer over-read exists in Microsoft Office PowerPoint, which could allow an unauthorized attacker to disclose information over a network. A buffer over-read occurs when...
PT-2026-115230
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...
CVE-2026-79841: Out-of-bounds Write
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption...
PT-2026-114891
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow...
CVE-2026-79827: Heap-based Buffer Overflow
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow...
PT-2026-114427
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP...
PT-2026-116536
Уязвимость функции formTcpipSetup файла /goform/formTcpipSetup микропрограммного обеспечения маршрутизаторов TRENDnet TEW-432BRP связана с выходом операции за границы буфера в памяти при обработке параметра Name. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать...
CVE-2026-110875: Out-of-bounds Write
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...
CVE-2026-108426: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-114967
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash...
PT-2026-115246
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Office, which allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow is a memory...
CVE-2026-111273: Off-by-one Error
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...
CVE-2026-111274: Out-of-bounds Read
unarr through 1.1.1 contains a heap-based out-of-bounds read in zipparseextrafields in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and crash...
PT-2026-115265
Name of the Vulnerable Software and Affected Versions unarr version 1.1.1 Description An off-by-one heap-based buffer overflow occurs in the tar get name function within tar/parse-tar.c, which is accessible via the ar entry get name API. A remote attacker can provide a specially crafted TAR archi...
CVE-2026-15176
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
PT-2026-121430
Name of the Vulnerable Software and Affected Versions EDK2 versions prior to edk2-stable202608 Description A critical buffer overflow flaw exists in the UEFI PXE network boot driver NetworkPkg/UefiPxeBcDxe. An unauthenticated attacker with local network access can send a specially crafted ICMP or...
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and...