CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

CVE-2026-18298

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-18296

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

SUSE-SU-2026:3687-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

SUSE-SU-2026:3686-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

nginx-rift-check

nginx-rift-check Trova configurazioni vulnerabili a CVE-2026-42945 , l'heap buffer overflow nel ngxhttprewritemodule di nginx. Eseguire una versione di nginx affetta dalla 0.6.27 alla 1.30.0 non basta perché la vulnerabilità sia sfruttabile. La configurazione deve contenere una coppia specifica d...

CVE-2026-21399

A flaw was found in the Intel Open Volume Kernel Library Intel Open VKL. This heap-based buffer overflow vulnerability, present in user applications, could allow an authenticated local attacker to trigger a denial of service. This attack has low complexity and requires no user interaction,...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065...

SUSE-SU-2026:3678-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

CVE-2026-76888

A flaw was found in Wireshark. A remote attacker could exploit a heap-based buffer overflow vulnerability within the RDP Remote Desktop Protocol dissector. By crafting a malicious RDP packet, an attacker could cause the Wireshark application to crash, leading to a denial of service. Mitigation Do...

nginx-map-risk-audit

CVE-2026-42533: مراجعة مخاطر NGINX Map Regex ملاحظة بحثية دفاعية حول CVE-2026-42533، وهو تجاوز سعة مخزن مؤقت في كومة الذاكرة heap buffer overflow في معالجة طلبات NGINX، مرتبط بتوجيهات map مع التقاطات تعبيرات نمطية وأنماط معينة لتقييم المتغيرات. بعبارات بسيطة: NGINX هو برنامج خادم ويب ووكيل عكسي...

CVE-2022-0185-Analysis-and-Exploit

CVE-2022-0185-Analysis-and-Exploit Forschung und Proof-of-Concept für die Heap-Overflow-Schwachstelle CVE-2022-0185 im Linux-Kernel. CVE-2022-0185 – Linux-Kernel-Heap-Overflow-Analyse Überblick CVE-2022-0185 ist eine heap-basierte Pufferüberlauf-Schwachstelle in der...

Exploit for CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLA...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the setregn function. An attacker can cause a four-byte heap buffer overflow by supplying crafted SH2A FPU bytecode processed through csdisasmiter or csdisasm with specific architecture and mode options,...

CVE-2026-42533-POC

CVE-2026-42533 Overflow del buffer heap e perdita di informazioni dall'heap pre-autenticazione in nginx, causati dalla mancata salvataggio/ripristino dello stato delle catture PCRE tra le due passate del motore degli script. Una variabile map basata su regex valutata tra due riferimenti di cattur...

EUVD-2026-63636

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

EUVD-2026-63675

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-72854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet...