CVE-2025-9820

A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=4951915732729856 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address:...

wasmer:universal_singlepass: Stack-buffer-overflow in wasmer_vm::trap::traphandlers::raise_lib_trap

Detailed Report: https://oss-fuzz.com/testcase?key=5117047762911232 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalsinglepass Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7a30876adc08 Crash State:...

CVE-2026-0792

ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this...

CVE-2026-0791

ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this...

Azure Linux 3.0 Security Update: espeak-ng (CVE-2023-49991)

The version of espeak-ng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49991 advisory. - Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition...

openssl:pkcs12: Stack-buffer-overflow in kdf_pbkdf2_derive

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4546542626471936 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: pkcs12 Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 5 Crash Address:...

Tenda Ax3 security vulnerabilities

The Tenda Ax3 is a Wi-Fi 6 dual-band router with a gigabit port, produced by the Chinese company Tenda. The Tenda Ax3 v16.03.12.11 version contains a security vulnerability. This vulnerability stems from improper handling of the citytag stack buffer in the formGetIptv function, which may lead to...

CVE-2025-68137: Buffer Copy without Checking Size of Input

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in SdpPacket::parseheader allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining length to read is computed using the current length subtract...

CVE-2025-70651: Stack-based Buffer Overflow

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AX-3 fromAdvSetMacMtuWan Function Stack Buffer Overflow Vulnerability

Tenda AX-3 is a home smart wireless router from Tenda that supports Wi-Fi6 802.11ax standard for home networking environment. The Tenda AX-3 suffers from a stack buffer overflow vulnerability, which stems from the failure of the serviceName2 parameter in the fromAdvSetMacMtuWan function to proper...

mruby:mruby_fuzzer: Stack-buffer-overflow in mpn_addmul_1

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4947432894169088 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x744af8ed6ae8...

OESA-2026-1182 libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002610 advisory. The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it...

Tenda AX1806 security vulnerabilities

The Tenda AX1806 is a WiFi6 wireless router from Tenda China. The Tenda AX1806 suffers from a stack buffer overflow vulnerability that stems from the sub65B5C function's wanSpeed parameter failing to properly validate the length size of the input data, which can be exploited by an attacker to cau...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003204 advisory. The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it...

Tenda WH450 /goform/RouteStatic file stack buffer overflow vulnerability

The Tenda WH450 is a wireless access point produced by the Chinese company Tenda. The Tenda WH450 has a stack buffer overflow vulnerability, which stems from incorrect handling of the page parameter in the file/goform/RouteStatic. No detailed details about the vulnerability are currently availabl...

Hikvision wireless access points DoS

The vulnerability of the search and detection function for Hikvision wireless access points is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

ROS-20260113-7399

A vulnerability in the loongarch component of the Linux operating system kernel is related to a buffer overflow on the stack. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 8 : libxml2-2.9.7-19.el8_10 (AXSA:2025-9748:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9748:04 advisory. libxml2: Use-After-Free in libxml2 CVE-2024-56171 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 CVE-2025-24928 Tenable has...