PT-2026-67935

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A stack-based buffer overflow occurs in the strcpy function within the /goform/APSecurity 5g file. This issue can be triggered remotely by manipulating the cipher argument. A...

PT-2026-67939

Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions prior to 2.5.3-170306 Description A remote attack is possible due to a stack-based buffer overflow in the strcpy function within the /goform/ConfigAdvideo file. This occurs when the timestart argument is manipulated. ...

PT-2026-67937

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A remote attack is possible due to a stack-based buffer overflow in the strcpy function within the /goform/getOneApConfTempEntry file. This occurs when the tempName argument is...

CVE-2017-20242

Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

CVE-2017-20242 Keysight IxChariot Endpoint stack-based buffer overflow

Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

CVE-2017-20242

CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...

CVE-2026-70368

A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...

CVE-2026-70368 Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message

A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...

CVE-2026-70368

A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...

CVE-2026-10709 FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

PT-2026-91062

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.61068 1546 841 CN TDC Description A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the formIPMacBindAdd function when processing the IPMacBindRule argument. This flaw allows...

CVE-2026-49435: Stack-based Buffer Overflow

Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges...

CVE-2026-10710: Stack-based Buffer Overflow

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10709: Stack-based Buffer Overflow

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

PT-2026-67702

Name of the Vulnerable Software and Affected Versions Autodesk FBX SDK affected versions not specified Description A stack-based buffer overflow occurs in the fbxsdk::ExtractDrive function when parsing a maliciously crafted FBX file. This flaw allows a remote attacker to execute arbitrary code...

CVE-2017-20242: Stack-based Buffer Overflow

Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

CVE-2026-25289: Stack-based Buffer Overflow

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

PT-2026-67816

Name of the Vulnerable Software and Affected Versions Keysight IxChariot Endpoint and associated products affected versions not specified Description Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow, which occurs when a program writes more data to a buffer...

CVE-2026-18589

The CVE-2026-18589 entry concerns Wavlink WL-NU516U1 (model 708c073-mt7628). The vulnerability is in nas.cgi, affecting the change_password function where manipulating User1Passwd triggers a stack-based buffer overflow. It is a NETWORK-accessible flaw with LOW attack complexity and NO user intera...

CVE-2026-18589: Stack-based Buffer Overflow

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...