ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field

Summary A stack-based buffer overflow exists in the ImageMagick FTXT image reader. A crafted FTXT file can cause out-of-bounds writes on the stack, leading to a crash. ================================================================= ==3537074==ERROR: AddressSanitizer: stack-buffer-overflow on...

CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

ROS-20260224-73-0007

Vulnerability in gimp related to stack buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

CVE-2026-25968: Stack-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

openjph:ojph_expand_fuzz_target: Stack-buffer-overflow in ojph::local::ojph_decode_codeblock_avx2

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5660297254993920 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address...

CVE-2026-2962

A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may b...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. Version 1.01.07 of the D-Link DWR-M960 contains a security vulnerability. This vulnerability stems from incorrect handling of a parameter called submit-url in the function sub460F30 of the Scheduled Reboot Configuration Endpoint, whi...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters submitted in the function sub42B5A0 within the component Bridge VLAN Configuration Endpoint’s...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from an stack buffer overflow issue in the operation of the submit-url parameter in the sub469104 function found in the /boafrm/formIpv6Setup...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from the sub41914C function in the /boafrm/formWanConfigSetup file, where there is a stack buffer overflow due to improper handling of the...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from the sub425FF8 function in the /boafrm/formFirewallAdv file, where there is a stack buffer overflow issue related to the handling of the...

Tenda A21 security vulnerabilities

The Tenda A21 is a wireless signal extender produced by the Chinese company Tenda. Version 1.0.0.0 of the Tenda A21 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/SetOnlineDevName, specifically the devName parameter, which may...

CVE-2026-2853

A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated...

CVE-2026-2853 D-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflow

A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated...

Sricam DeviceViewer security vulnerability

Sricam DeviceViewer is a monitoring video management software developed by Sricam Corporation. Version 3.12.0.1 of Sricam DeviceViewer contains a security vulnerability. This vulnerability stems from a stack buffer overflow issue in the user management feature, which may allow authenticated...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. Version 1.01.07 of the D-Link DWR-M960 contains a security vulnerability. This vulnerability stems from an error in the operation of the submit-url parameter in the sub462E14 function of the System Log Configuration Endpoint componen...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from an incorrect operation of the submit-url parameter in the sub423E00 function within the Port Forwarding Configuration Endpoint component...

CVE-2026-2657

A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wrencompiler.c of the component Error Message Handler. Such manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclos...

CVE-2025-33130

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_raise_trap

Detailed Report: https://oss-fuzz.com/testcase?key=6521474956722176 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x79da701adca8 Crash State: wasmervmraisetrap Sanitizer:...