10726 matches found
CVE-2026-90558
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
CVE-2026-90558
sngrep through 1.8.4 is affected by stack buffer overflow vulnerabilities in SIP attribute formatting routines. When header values (e.g., Call-ID, X-Call-ID, or other fields) exceed the 255-byte buffer limit , the overflow can cause crashes or enable arbitrary code execution during packet parsing...
CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
EUVD-2026-76903
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
CVE-2026-90558
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
exploit.pub
Exploit Modeling Lab — Windows / x86 stack buffer overflow st...
CVE-2026-90558: Stack-based Buffer Overflow
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...
PT-2026-90718
Name of the Vulnerable Software and Affected Versions sngrep versions prior to 1.8.4-2.1 Description Stack buffer overflow issues exist in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. An attacker can send malicious SIP packets containing oversized header...
Linux Distros Unpatched Vulnerability : CVE-2026-90558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit...
openSUSE 16 Security Update : opensc (openSUSE-SU-2026:21820-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21820-1 advisory. This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to...
Linux Distros Unpatched Vulnerability : CVE-2026-89587
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816...
Linux Distros Unpatched Vulnerability : CVE-2026-89653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: reject exporttargets ranks = CEPHMAXMDS in mdsmap decode MDSMap exporttargets entries are monitor controlled. checknewmap uses each entry as a bit number ...
CVE-2026-89587
A flaw was found in the Linux kernel's ACPI Platform Firmware Runtime Update pfrupdate component. The querycapability function, responsible for handling ACPI buffer objects from firmware, performs an unchecked memory copy operation. If the firmware provides an oversized buffer, a stack buffer...
CVE-2026-48490
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
EUVD-2026-76769
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
CVE-2026-48490 ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
CVE-2026-48490
ArduinoCore-avr (the source code and configuration files of the Arduino AVR Boards platform) contains a stack-based buffer overflow in its floating-point concatenation path. Versions prior to 1.8.8 are affected. Passing values near the extremes of the float or double range to String::concat(float...
AZL-100848 CVE-2026-89729 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensorhubgetfeature sensorhubgetfeature clamps its return value to the caller's buffer size, but the copy loop still copies field-reportsize / 8 bytes for each report value. A malicious...