CVE-2026-124747 Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-120010

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

CVE-2026-120010

The SAP NetWeaver Application Server (SAP Message Server) is vulnerable to a heap buffer overflow due to improper memory allocation sizing when processing specific HTTP requests. An unauthenticated attacker can exploit this by sending a specially crafted request, which causes the affected compone...

CVE-2026-120010 Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

EUVD-2026-120696

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

EUVD-2026-120564

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

CVE-2026-125401

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

PT-2026-141261

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

CVE-2026-125401: ettercap: Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c…

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

CVE-2026-125401 Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

CVE-2026-125401

Ettercap versions through 0.8.4.1 are vulnerable to a heap buffer overflow in the gg_get_version() function located in src/dissectors/ec_gg.c. The root cause is an out-of-bounds write where up to 44 bytes are written into a 30-byte allocation. A remote attacker can exploit this by sending Gadu-Ga...

CVE-2026-122056 Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service

A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format XCCDF document using the sds-compose option. An attacker could exploit this vulnerability to corrupt memory, resulting in an application...

CVE-2026-125262

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output picture dimensions are not validated against the allocated frame. Attackers can embed crafted LCEVC enhancement data with differing global configurations in H.264 or HEVC streams to...

CVE-2026-125260

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/exrenc.c that allows attackers to corrupt heap memory when encodescanlinerle processes frames taller than the encoder height. Attackers can supply crafted input whose resolution grows mid-stream, transcoded to OpenEX...

CVE-2026-125256

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125249

FFmpeg 7.1 through 9.0.2 contains an integer overflow in ffvkdecodeaddslice in libavcodec/vulkandecode.c that miscalculates the Vulkan hwaccel bitstream buffer size. Attackers can supply a crafted stream with over 2 GiB of slice data per frame, causing memcpy to write past a smaller pooled...

CVE-2026-125250

FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gifimagewriteimage in libavcodec/gif.c because shrunkbuf is sized from the first frame's linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, causing remapframetopalette to write past shrunkbuf a...

CVE-2026-125239

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffdxva2hevcfillpictureparameters that allows attackers to corrupt memory via unbounded non-uniform tile counts. Attackers can supply crafted HEVC bitstreams with many non-uniformly spaced tiles to write controlled 16-bit values...