PT-2026-107119

Name of the Vulnerable Software and Affected Versions AOS-S affected versions not specified Description Buffer overflow vulnerabilities exist in the affected interface of AOS-S. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold...

ALSA-2026:76877 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

Stack-based buffer overflow vulnerability exists in the Brocade Fabric OS SNMP daemon handling

: A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

glibc Vulnerable to Memory Corruption via Heap-Based Buffer Overflow in 'malloc.ca' File (CVE-2026-0861)

Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...

Pre-Authentication Stack-Based Buffer Overflow in IKEv2 Key Exchange Processing

: A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over...

Buffer Overflow vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94587)

: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

Stack-Based Buffer Overflow in Setuid Diagnostic Utility via Argument Parsing

: A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

PT-2026-107251

A heap-based buffer over-read in H5Z filter scaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d nelmts size byte...

RHEL 8 : ghostscript (RHSA-2026:76877)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76877 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats...

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

PT-2026-107125

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76747 Vendor → Unknown Severity → Critical — CVSS 9.1 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

CVE-2025-71384

The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a stack-based buffer overflow in the /api/addStaticDHCP comment field. This flaw allows administrators connected to the local Wi-Fi network to achieve remote code execution by executing arbitrary OS commands. While a proof of concept is mentione...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : EDK II vulnerabilities (USN-8865-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8865-1 advisory. It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker cou...

The vulnerability of the ipinfo_lookup() function in the MTR network diagnostic and monitoring utility allows a hacker to cause a service failure.

The vulnerability of the ipinfolookup function in the MTR network diagnostic and monitoring utility is related to the operation that exceeds the buffer boundaries in memory when processing DNS responses. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261006-73-0034

The vulnerability of the KVM kernel component in the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106724

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT doPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointer...