JSON generator heap buffer overflow when streaming to an IO

Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dumpobj, io and JSON::Stategenerateobj, io can write past the internal JSON generat...

UBUNTU-CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

CVE-2020-37085

CVE-2020-37085 affects VirtualTablet Server 3.0.2. It describes a denial-of-service condition: sending oversized string payloads via the Thrift protocol, specifically by a long string to the send_say() method, causes the server to become unresponsive. The provided sources do not include a remedia...

PT-2026-5835

VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash the service by sending oversized string payloads through the Thrift protocol. Attackers can exploit the vulnerability by sending a long string to the send say method, causing the server to become...

libthai integer overflow

Integer overflow on oversized strings...

Microsoft Excel code execution

Buffer overflow on oversized strings copying...