dlplibs:sdcfuzzer: Heap-buffer-overflow in STOFFStarMathToMMLConverterInternal::Parser::convert

Detailed Report: https://oss-fuzz.com/testcase?key=6749423412772864 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: sdcfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c5877012988 Crash State:...

vlc:vlc-demux-dec-libfuzzer-ts: Heap-buffer-overflow in PESDataChainHandle

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6018183114063872 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-ts Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x7687d89f3643...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_encode_add_object

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5527194965966848 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

kfilemetadata:taglibextractor_fuzzer: Heap-buffer-overflow in TagLib::ID3v2::PopularimeterFrame::rating

Detailed Report: https://oss-fuzz.com/testcase?key=4577269868462080 Project: kfilemetadata Fuzzing Engine: afl Fuzz Target: taglibextractorfuzzer Job Type: aflasankfilemetadata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b727f9e1830 Crash State:...

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...

CVE-2026-64446: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...

PT-2026-72921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the SCTP implementation when the sctp assoc add peer function increments the 16-bit transport count variable for every new unique peer. When the 65,536th...

CVE-2026-66039

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytesperpacket value. Attackers can craft a CAF file with oversized bytesperpack...

AZL-93399 CVE-2026-66035 affecting package libssh2 for versions less than 1.11.1-5

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

Integer Overflow or Wraparound

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Summary Heap-buffer-overflow READ 16 bytes in Gemm76::adaptgemm76 onnx/versionconverter/adapters/gemm76.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses Bshape1 without checking rank. On Release builds the OOB read ...

GHSA-76Q6-2P6H-XJQR ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

Running an X11 import with a crafted window title can result in a heap buffer over-write...

EUVD-2026-41124

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments...

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

EUVD-2026-48452

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...

PT-2026-64448

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-27 Description A heap buffer over-write can occur during the fx operation when a crafted argument is processed. A heap buffer over-write is a memory corruption issue where data is written beyond the boundari...

PT-2026-64405

Name of the Vulnerable Software and Affected Versions onnx affected versions not specified Description A heap-buffer-overflow read occurs in the Gemm 7 6::adapt gemm 7 6 function when ConvertVersion processes a model containing a Gemm node with input tensors having fewer than two dimensions. The...

PT-2026-64450

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-52 ImageMagick versions prior to 7.1.2-27 Description Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, which leads to a heap buffer over-write. An integer overflow...