21911 matches found
CVE-2026-116258
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was...
CVE-2026-116124
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...
CVE-2026-116124
A flaw was found in libgsf. A heap-based buffer overflow vulnerability exists in the OLE2 document parser within the oleinforeadmetabat function. A remote attacker could exploit this flaw by enticing a user to open a specially crafted file. Successful exploitation could lead to arbitrary code...
CVE-2026-116124 GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...
CVE-2026-116124
A heap-based buffer overflow vulnerability exists in GNOME libgsf up to version 1.14.60 . The flaw is located within the OLE2 Parser component, specifically in the ole_info_read_metabat function of the gsf/gsf-infile-msole.c file. This vulnerability can be triggered via a remote attack . Remediat...
EUVD-2026-109617
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...
xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow
A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...
xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize
A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension XKB, the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially...
xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling
A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...
Important: Red Hat Security Advisory: libX11 security update
An update for libX11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
libX11: libX11: Heap-based buffer overflow via malicious X server
A flaw was found in libX11. A heap-based buffer overflow vulnerability exists during the handling of XkbGetMap replies. A remote attacker, by operating a malicious X server, could exploit this flaw to potentially execute arbitrary code or cause a denial of service on the client system. User...
CVE-2026-116160
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...
CVE-2026-116153
A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service DoS or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially crafted image requiring convex-hull calculations, an attacker ca...
CVE-2026-116160
A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, writing data beyond allocated memory limits, which corrupts...
EUVD-2026-109421
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...
CVE-2026-116160
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...
CVE-2025-47987
CVE-2025-47987: Windows CredSSP Elevation of Privilege š This repository contains documentation and analysis resources about the vulnerability CVE-2025-47987, a heap-based buffer overflow flaw affecting the Windows Credential Security Support Provider CredSSP protocol. š Description The...
CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-
Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...
CVE-2026-94127
CVE-2026-94127 ā F5 BIG-IP APM Detection Tool Defensive Author: https://github.com/FurkanKAYAPINAR/ A defensive, non-exploit detector for CVE-2026-94127 , a heap-based buffer overflow CWE-122 in F5 BIG-IP APM that allows an unauthenticated remote attacker to achieve remote code execution RCE. CVS...
PT-2026-123001
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the applicatio...