CVE-2026-75141: Heap-based Buffer Overflow

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-16855: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow...

CVE-2026-16847: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

CVE-2026-16845: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

PT-2026-78639

Heap-based buffer overflow in the multipart form-data parser in jst post.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

PT-2026-78614

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow...

PT-2026-78606

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...

PT-2026-78608

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...

PT-2026-78580

Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RT...

PT-2026-79978

Heap buffer overflow in PostgreSQL to chartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

PT-2026-79993

Heap buffer overflow in PostgreSQL pg dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102690 advisory. A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filterintra at libavfilter/vfbwdif.c, which might lead to memory corruption and other potential...

PT-2026-78526

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1c10bcc Description A heap buffer overflow exists in the RIST protocol reader within libavformat/librist.c. The function librist read fails to respect its size argument, copying the entire received payload lengt...

PT-2026-78463

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...

CVE-2026-16814: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

PT-2026-78527

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1cdeb3c Description A heap buffer overflow exists in the VC-2/Dirac RTP packetizer within the libavformat/rtpenc vc2hq.c file. The issue occurs because the packetizer copies an input-derived data unit or fragmen...

PT-2026-78524

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent,...

CVE-2026-75144: Heap-based Buffer Overflow

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer libavformat/rtpencvc2hq.c that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a...

PT-2026-79983

Heap buffer overflow in PostgreSQL pg stat statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

PT-2026-79979

Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...