SUSE CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

PT-2026-79568

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfile write function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZ LARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating tha...

Linux Distros Unpatched Vulnerability : CVE-2026-70654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them ...

PT-2026-79548

Name of the Vulnerable Software and Affected Versions luci-lib-px5g versions 18.06 through 25.12 Description A heap-based buffer overflow exists in the native ASN.1 encoding routine asn1 add obj within x509write.c when signing a certificate using a 2040-bit RSA key. The issue occurs because the B...

Linux Distros Unpatched Vulnerability : CVE-2026-68768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3678-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3678-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

CVE-2026-68768: Buffer Copy without Checking Size of Input

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...

Linux Distros Unpatched Vulnerability : CVE-2026-55893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and...

CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

CVE-2026-18298

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-18296

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

SUSE-SU-2026:3687-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

SUSE-SU-2026:3686-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

CVE-2026-21399

A flaw was found in the Intel Open Volume Kernel Library Intel Open VKL. This heap-based buffer overflow vulnerability, present in user applications, could allow an authenticated local attacker to trigger a denial of service. This attack has low complexity and requires no user interaction,...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

Security update for vim

This update for vim fixes the following issues: CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. CVE-2026-73072: heap buffer overflow when loading a spell file...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065...

SUSE-SU-2026:3678-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

CVE-2026-76888

A flaw was found in Wireshark. A remote attacker could exploit a heap-based buffer overflow vulnerability within the RDP Remote Desktop Protocol dissector. By crafting a malicious RDP packet, an attacker could cause the Wireshark application to crash, leading to a denial of service. Mitigation Do...