CVE-2026-86476: Out-of-bounds Write

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

PT-2026-114151

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.31.0 Description A heap-based buffer overflow exists in the freerdp dsp decode mp3 function when the software is built with WITH LAME=ON and WITH DSP FFMPEG=OFF. The issue occurs because the right-channel PCM...

CVE-2026-103994: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-102014: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response...

PT-2026-135893

Уязвимость модуля ngx http core module веб-серверов NGINX Plus и NGINX Open Source связана с переполнением буфера в кучи. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код или вызывать отказ в обслуживании путем отправки специально сформированно...

PT-2026-113908

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...

CVE-2026-93479: Heap-based Buffer Overflow

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

CVE-2026-33789: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protoco...

CVE-2026-86562: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

HPE NonStop Hpjmeter buffer error vulnerability

Versions of HPE NonStop Hpjmeter T0866L50 prior to AAM contain a buffer error vulnerability caused by stack and heap buffer overflows...

PT-2026-122288

Security vulnerability affects the libjpeg-turbo package. A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2 merged upsample internal function of jdmrgext...

CVE-2026-101927: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service DoS or achieve privilege escalation to root via crafted IPC event messages...

PT-2026-113754

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in il gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing...

CVE-2026-92150: Reachable Assertion

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriverhandler deserialization is vulnerable because the receive handler uses FWASSERT for externally influenced deserialization stat...

CVE-2026-101338: Stack-based Buffer Overflow

When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which t...

PT-2026-113789

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description A Heap-based Buffer Overflow occurs in the eventd process. This issue allows an unprivileged local attacker...

CVE-2026-101981: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message...

PT-2026-114336

Name of the Vulnerable Software and Affected Versions F´ F Prime versions prior to 4.2.0 Description Svc::GenericHub fromBufferDriver handler deserialization is flawed because the receive handler uses FW ASSERT for type validation and deserialization status influenced by external sources, and...

CVE-2026-102175: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

PT-2026-113897

A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and...