PT-2026-35107

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images...

Tenda F456 stack buffer overflow vulnerability (CNVD-2026-37071)

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the failure of the fromexeCommand function in /goform/exeCommand to properly handle the cmdinput parameter. No detailed details about the vulnerability are...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456. Patch Instructions: To install this SUSE update u...

Tenda F456 security vulnerabilities

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a security vulnerability. This vulnerability stems from an issue with the formWrlsafeset function in the goform/AdvSetWrlsafeset file, where there is a stack buffer overflow due t...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1550)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1550 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 display...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37076)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the failure of the formL7ImForm function in /goform/L7Im to properly handle the page parameter. Currently, no detailed details about the...

Tenda AC9 stack buffer overflow vulnerability

The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the decodePwd function in /goform/WizardHandle failing to handle the WANS parameter properly. Currently, no detailed details about the...

PT-2026-44272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow occurs in the target tg pt gp members show function when formatting LUN paths using snprintf into a 256-byte stack buffer. Because iSCSI IQN names can reach 223 bytes,...

TOTOLINK A3002MU security vulnerabilities

Totolink A3002MU is a wireless router product that provides network connectivity and wireless access. A stack buffer overflow vulnerability exists in the Totolink A3002MU. The vulnerability stems from a failure to properly handle the wan-url parameter in the HTTP request handling component, which...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37075)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the fromAdvSetWan function in /goform/AdvSetWan, which fails to properly handle the wanmode/PPPOEPassword parameters. Currently, no detailed...

Tenda AC9 stack buffer overflow vulnerability

The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the formQuickIndex function in the POST request handler failing to properly handle the PPPassword parameter. No detailed details about...

CVE-2019-25705 Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

Tenda F451 security vulnerabilities

The Tenda F451 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.7 of the Tenda F451 contains a security vulnerability. This vulnerability stems from the improper handling of the page parameter in the fmtL7ProtForm function within the httpd component, which may lead to a...

Tenda F451 security vulnerabilities

The Tenda F451 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.7 of the Tenda F451 contains a security vulnerability. This vulnerability stems from an improper handling of the page parameter in the fromDhcpListClient function within the httpd component, which may lead to...

CVE-2019-25705: Out-of-bounds Write

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

CVE-2026-4156 ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability

ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex EV chargers. Authentication is not required to exploit this...

EUVD-2026-21382

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...

CVE-2026-5525

A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backslash and null terminator without proper bounds...

PT-2026-31894

Name of the Vulnerable Software and Affected Versions Notepad++ version 8.9.3 Description A stack-based buffer overflow exists in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backsla...

FreeBSD kgssapi.ko Kernel Exploit

The vulnerability of the kgssapi.ko module in FreeBSD operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...