1648 matches found
CVE-2026-48372
Format Plugins (Adobe) suffers a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). A security update (Adobe APSB26-87) addresses critical vulnerabilities in Format Pl...
CVE-2026-17572
A flaw was found in HDF5, a data management library. This vulnerability, a heap-based buffer overflow, allows a local attacker to cause a denial of service DoS by persuading a user to open a specially crafted HDF5 file. The malformed file can trigger out-of-bounds memory operations, leading to...
Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the untransform function of the THeaderTransport process. An attacker can achieve arbitrary code execution or cause a denial of service by sending specially crafted data that triggers a heap buffer overflow...
CVE-2026-66374
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
Microsoft Account Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
PT-2026-64206
Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Account, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow is a memo...
CVE-2026-64620
FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...
httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers
A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...
UBUNTU-CVE-2026-16118
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...
EUVD-2026-45307
IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server ...
CVE-2026-48373
CVE-2026-48373 describes a heap-based buffer overflow in Acrobat Reader that could allow arbitrary code execution in the context of the current user. The vulnerability requires user interaction (victim opens a malicious file); no vector details are provided beyond this condition. The affected pro...
PT-2026-60851
Name of the Vulnerable Software and Affected Versions Acrobat Reader affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory. This issue could allow arbitrary code...
PT-2026-60343
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home affected versions not specified Description A heap-based buffer overflow exists in the handling of custom USB packets. The issue occurs because the device fails to properly validate the length of user-supplied...
CVE-2026-48339
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48339
CVE-2026-48339 describes a heap-based buffer overflow in Bridge that could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction: a victim must open a malicious file. The available connected documents reiterate this condition and identify...
