CVE-2026-112021 snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112021

The snac2 software prior to version 2.93 is vulnerable to a heap-based buffer overflow in the _xs_json_load_lexer() function. An unauthenticated remote attacker can trigger this by sending a crafted application/activity+json POST request to activitypub_post_handler(). The vulnerability occurs bec...

EUVD-2026-103474

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112021

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

EUVD-2026-103461

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

CVE-2026-112021: Heap-based Buffer Overflow

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112008: Incorrect Calculation of Buffer Size

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

Linux Distros Unpatched Vulnerability : CVE-2026-112008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers...

PT-2026-116612

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng read ordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

AbiWord wv buffer error vulnerability

AbiWord versions 1.2.9 and earlier have a buffer error vulnerability. This vulnerability stems from the wvGetSTSH function in stylesheet.c, which involves heap-based out-of-bounds read operations. Attackers can exploit this vulnerability by providing custom Word style sheets or.doc files containi...

Updated parted package fixes security vulnerabilities

A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application...

EUVD-2026-103202

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

EUVD-2026-103203

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...

EUVD-2026-103187

A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR .pvr file, an attacker can trigger a heap-based buffer overflow, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2017-20286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loadi...

NoMachine mDNS Heap-based Buffer Overflow

NoMachine versions prior to 10.1.7, 9.9.6, and 8.27.1 contain an mDNS resource-record parsing heap-based buffer overflow that allows network-adjacent unauthenticated attackers to execute code in the service account context...

Linux Distros Unpatched Vulnerability : CVE-2024-58397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime...

Rocky Linux 9 [CIQ] Security Update: hplip / hplip-common / hplip-debuginfo / hplip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_82882)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682882 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...

DEBIAN-CVE-2026-89088

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...