CVE-2026-58498

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffer-overflow in the official router-ipv6 application shipped with bacnet-stack, this results in an out-of-bounds write to the global transmit...

CVE-2026-62973

The BACnet Stack C library for embedded systems contains a remote out-of-bounds read vulnerability in the official BACnet client application apps/readpropm (commit e2bdbf6). Specifically, when readpropm issues a legitimate ReadPropertyMultiple request to a malicious BACnet/IP peer, the peer can p...

CVE-2026-62973 BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, a remote out-of-bounds read exists in the official BACnet client application apps/readpropm in bacnet-stack commit e2bdbf6. When readpropm sends a legitimate...

CVE-2026-58498

The BACnet Stack C library for embedded systems contains a remote global-buffer-overflow in the official router-ipv6 application. The vulnerability exists in the routed APDU forwarding path and leads to an out-of-bounds write to the global transmit buffer under ASan. This issue affects versions p...

proftpd-rewrite-utf8trans

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · proftpd-rewrite-utf8trans Write-up: https://abraxaslabs.tech/research/proftpd-rewrite-utf8trans proftpd-rewrite-utf8trans Class: Crash Reach: Remote ProFTPD 1.3.9d f59f248 - ProFTPD proftpd.org contrib modrewrite ship...

CVE-2025-50361

Global Buffer Overflow in SmallBASIC SmallBASIC is a fast and easy to learn BASIC language interpreter ideal for everyday calculations, scripts and prototypes. SmallBASIC includes trigonometric, matrices and algebra functions, a built in IDE, a powerful string library, system, sound, and graphic...

CVE-2026-52786

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

CVE-2026-52786 BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

CVE-2026-52786

The BACnet Stack C library (prior to versions 1.4.5 , 1.5.1 , and 1.6.0 ) contains a network-reachable memory corruption vulnerability in the official apps/epics client tool (specifically on v1.6.0-rc1). A malicious BACnet/IP endpoint can send a syntactically valid ReadPropertyMultiple-ACK contai...

CVE-2026-52786: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

PT-2026-146026

Name of the Vulnerable Software and Affected Versions BACnet Stack versions prior to 1.4.5 BACnet Stack versions prior to 1.5.1 BACnet Stack versions prior to 1.6.0 Description The official apps/epics client tool contains a global-buffer-overflow in the response-processing path. A malicious...

CVE-2024-25165

A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...

CVE-2024-22912

A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

EUVD-2026-102351

AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...

CVE-2026-110876

AdPlug versions through 2.4 are affected by an out-of-bounds read vulnerability in the src/xsm.cpp file. The root cause is the processing of a negative note index , which allows reading before the note_table. Specifically, an attacker can craft an XSM file featuring the ofTAZ! signature and a son...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a global buffer overflow was observed in FreeRDP’s Base64 decoding path. The root cause appears to be implementation-defined character signedness: on Arm/AArch64 builds, plain characters are treated as...

Astra Linux – Vulnerability in fig2dev

Fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

Astra Linux – Vulnerability in aom

It was discovered that AOM v2.0.1 contains a global buffer overflow issue through the component av1/encoder/partitionsearch.h...

PT-2026-115126

Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description An out-of-bounds read exists in src/xsm.cpp that allows attackers to read memory before note table by providing a negative note index. This occurs when processing an XSM file containing the ofTAZ!...