CVE-2026-18497: Heap-based Buffer Overflow

A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbttGetGlyphShapeTT function within the nothings stbtruetype.h library when parsing malformed TTF TrueType Font file...

CVE-2026-19206: Heap-based Buffer Overflow

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the memcached client implementation. An attacker can execute arbitrary code or cause a denial of service by sending specially crafted data to the affected process. Remediation Upgrade apr-util to version...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the redis client implementation. An attacker can execute arbitrary code or cause a denial of service by sending specially crafted data to the affected process. Remediation Upgrade apr-util to version 1.6.5 ...

AZL-94634 CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-34501

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

CVE-2026-19156: Heap-based Buffer Overflow

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-67873: Heap-based Buffer Overflow

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegmentencode validates only the standalone segment length via FileSegmentGetMaxDataSize and does not verify the residual capacity of the current ASDU frame befo...

CVE-2026-34502: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

CVE-2026-34501: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-67867: Heap-based Buffer Overflow

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...

PT-2026-68360

Name of the Vulnerable Software and Affected Versions lib60870-C version 2.4.0 Description A heap-based buffer overflow occurs in the server-side FileSegment ASDU encoding path. The issue arises because the FileSegment encode function validates only the standalone segment length using FileSegment...

PT-2026-67773

Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited...

CVE-2026-18784: Heap-based Buffer Overflow

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...

CVE-2026-67860: Heap-based Buffer Overflow

open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...

PT-2026-67882

Name of the Vulnerable Software and Affected Versions open62541 version 1.5.5 Description A heap-based buffer overflow occurs in the default HistoryRead path when the default history database is utilized with the memory backend. A heap-based buffer overflow is a memory corruption issue where a...

CVE-2017-20241: Heap-based Buffer Overflow

Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

PT-2026-67814

Name of the Vulnerable Software and Affected Versions Keysight IxChariot Endpoint versions prior to 9.5.102 Description A heap-based buffer overflow exists, which occurs when a program writes more data to a heap memory block than it can hold. An unauthenticated remote attacker can send a speciall...

CVE-2026-10849: Heap-based Buffer Overflow

The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in responsejsoncb subsys/mgmt/hawkbit/hawkbit.c. The buffer is sized to hold the received body bytes but reserves no space for a terminating NUL. When the...