PT-2026-80924

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

PT-2026-80897

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kick num" to determine the number o...

Konami's Metal Gear Online 3 contains a heap-based buffer overflow

Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitrary code on lobby members' machines through specially crafted data. Description Metal Gear Online 3 i...

CVE-2026-56135

A heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c affects NTFS-3G through 2026.2.25 . The overflow is triggered when an attacker mounts a maliciously crafted NTFS image and creates a file within a crafted directory. Because the ntfs-3g binary runs with SUI...

PT-2026-80884

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

PT-2026-80908

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description An issue exists where unauthenticated remote attackers can overwrite the saved stack state by providing an oversized destHost parameter to the ipFilterList=mod action in the 'netis.cgi'...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

python-pyasn1 security update

0.6.2-1.1 - Fix CVE-2026-59886: prevent overflow in Real.float when converting ASN.1 Real values with large exponents Resolves: RHEL-217904...

gstreamer1-plugins-good security update

1.16.1-7.7 - Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover Resolves: RHEL-246382 1.16.1-7.6 - Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder Resolves: RHEL-246561 1.16.1-7.5 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246618 1.16.1-7.4 - Fix...

MiracleLinux 9 : [security - high] nodejs:24 (AXSA:2026-1641:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1641:01 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...

ROS-20260824-73-0004

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

ROS-20260824-73-0007

The vulnerability in freerdp3 is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-80850

Name of the Vulnerable Software and Affected Versions RustDesk affected versions not specified Description Windows clipboard redirection fails to perform an upper bound check when copying a peer-supplied length into a fixed-size caller buffer. When an OLE paste consumer, such as explorer.exe, cal...

PT-2026-80931

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

PT-2026-80907

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description A stack-based buffer overflow exists in the login handler of the '/bin/netis.cgi' endpoint. The issue occurs because the custom Base64 decoder fails to validate the output length against a...

CVE-2026-52492

libtiff 's rgb2ycbcr utility contains an integer overflow in the cvtRaster() function when computing strip buffer sizes. This leads to an undersized heap allocation and a subsequent heap-based buffer overflow triggered during YCbCr conversion of a crafted TIFF image. A fix is referenced in the pr...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...

CVE-2026-78156

A heap-based buffer overflow exists in Open5GS 2.8.0 , specifically in the function hss_ogs_diam_s6a_air_cb within the file src/hss/hss-s6a-path.c, which implements the S6a Authentication-Information-Request Handler . The flaw is triggered by manipulation of the Visited-PLMN-Id argument, enabling...