SUSE CVE-2026-50256

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

TP-Link Tapo C520WS security vulnerabilities

The TP-Link Tapo C520WS is a WiFi camera produced by TP-Link Corporation. The TP-Link Tapo C520WS v2 version has a security vulnerability. This vulnerability stems from a stack buffer overflow in the ONVIF DeleteUsers service. Insufficient bounds checking allows authenticated attackers to send...

TP-Link Tapo C520WS security vulnerabilities

The Tapo C520WS v2 is a TP-Link network camera used for video surveillance and ONVIF device management. The Tapo C520WS v2 has a stack buffer overflow vulnerability. This vulnerability arises due to a lack of valid boundary checks when the ONVIF CreateUsers service processes XML user nodes...

CVE-2026-1949

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

CVE-2026-10063

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and...

CVE-2026-35083

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root...

Chromium: CVE-2026-10898 Stack buffer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

AZL-89546 CVE-2026-50259 affecting package xorg-x11-server 1.20.10-6

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...

AZL-89525 CVE-2026-50258 affecting package xorg-x11-server 1.20.10-6

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel XkbNumKbdGroups but CheckKeyTypes does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift...

AZL-89580 CVE-2026-50259 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...

AZL-89522 CVE-2026-50256 affecting package xorg-x11-server 1.20.10-6

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

AZL-89571 CVE-2026-50256 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

tdengine:sql-fuzzer: Stack-buffer-overflow in MurmurHash3_32

Detailed Report: https://oss-fuzz.com/testcase?key=6521509010276352 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x75e590dd032c Crash State: MurmurHash332 taosHashPut...

CVE-2026-50259 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...

CVE-2026-50259 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...

CVE-2026-50256: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

X.Org Server buffer error vulnerability

X.Org X Server is an X Window system display server developed by the X.Org Foundation. Xwayland is an open-source communication protocol developed by Xwayland that defines the communication method between the display server and its clients. Both X.Org X Server and Xwayland have security...

ROS-20260605-73-0018

The vulnerability in ImageMagick is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MariaDB: Stack Buffer-Overflow in MariaDB Charset_collation_map_st::insert_or_replace()

A stack-based buffer overflow was discovered in the MariaDB Server's Charsetcollationmapst::insertorreplace function. The function copied user-supplied charset and collation identifiers into fixed-size stack buffers using strmake with the attacker-controlled token length as the size bound instead...

apache-logging-log4cxx:TranscoderFuzzer-wchar_t: Stack-buffer-overflow in log4cxx::helpers::Transcoder::decode

Detailed Report: https://oss-fuzz.com/testcase?key=4974813507813376 Project: apache-logging-log4cxx Fuzzing Engine: centipede Fuzz Target: TranscoderFuzzer-wchart Job Type: centipedeasanapache-logging-log4cxx Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7b2b222daa1...