Lucene search
+L

9886 matches found

CNVD
CNVD
•added 2026/03/23 12:00 a.m.•55 views

Google Chrome stack buffer overflow vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a stack buffer overflow vulnerability, and attackers can exploit this vulnerability to cause heap corruption...

8.8CVSS8.1AI score0.00301EPSS
SaveExploits1
OSS-Fuzz
OSS-Fuzz
•added 2026/03/22 6:03 a.m.•12 views

xnu:net_fuzzer: Stack-buffer-overflow in strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=6416180201193472 Project: xnu Fuzzing Engine: honggfuzz Fuzz Target: netfuzzer Job Type: honggfuzzasanxnu Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0x78d83eed110c Crash State: strlcpy sosettcdbg sosetoptlock...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/03/21 5:12 p.m.•82 views

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_text_process_ssa

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6167396904927232 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x758481a3a820...

5.4AI score
SaveExploits0
osv_debian
osv_debian
•added 2026/03/20 2:16 a.m.•22 views

DEBIAN-CVE-2026-4444

Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.00301EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/20 12:00 a.m.•27 views

Tenda A18 Pro security vulnerabilities

The Tenda A18 Pro is a wireless signal extender produced by the Chinese company Tenda. Version 02.03.02.28 of the Tenda A18 Pro contains a security vulnerability, which stems from a stack buffer overflow in the setSchedWifi function found in the file/goform/openSchedWifi...

9CVSS8.2AI score0.00594EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/20 12:00 a.m.•5 views

CVE-2026-4444: Stack-based Buffer Overflow

Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.6AI score0.00301EPSS
SaveExploits1References1
Mend
Mend
•added 2026/03/19 8:29 p.m.•12 views

CVE-2026-3849

Stack Buffer Overflow in wcHpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH Encrypted Client Hello support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client...

9.8CVSS6.3AI score0.00451EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/19 4:54 p.m.•6 views

CVE-2026-0819

A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wcPKCS7BuildSignedAttributes, when adding custom signed attributes, the code passes an incorrect capacity value esd-signedAttribsCount to EncodeAttributes instead of the remaining available space...

7.7CVSS6.5AI score0.00103EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•8 views

CVE-2026-0819: Stack-based Buffer Overflow

A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wcPKCS7BuildSignedAttributes, when adding custom signed attributes, the code passes an incorrect capacity value esd-signedAttribsCount to EncodeAttributes instead of the remaining available space...

7.1CVSS6.5AI score0.00103EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•4 views

CVE-2026-3849: Out-of-bounds Write

Stack Buffer Overflow in wcHpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH Encrypted Client Hello support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client...

9.8CVSS6.3AI score0.00451EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/18 7:34 a.m.•14 views

CVE-2026-22319 Stack-Based Buffer Overflow in File Install Parameter Handling

A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack...

4.9CVSS6.2AI score0.00353EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2026/03/17 11:29 a.m.•37 views

gdal:ogr_miramon_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6569888155238400 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrmiramonfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0xf6af2c5...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/03/16 8:48 p.m.•13 views

vlc:vlc-demux-dec-libfuzzer-asf: Stack-buffer-overflow in SetupOutputFormat

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4583863266639872 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-asf Job Type: aflasanvlc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x787c1aeed04...

5.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2026/03/16 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2026-1431)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.9AI score0.00439EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•28 views

D-Link DIR-816 security vulnerabilities

The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 version 1.10CNB05 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter pskValue in the file/goform/form2Wl5BasicSetup.cgi, which may lead to a stack buffer...

10CVSS8.6AI score0.01205EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/03/16 12:00 a.m.•14 views

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-1362)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...

4CVSS6.9AI score0.00222EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/03/16 12:00 a.m.•42 views

Delta Electronics COMMGR2 Stack Buffer Overflow Vulnerability

Delta Electronics COMMGR2 is an automation equipment communication management software from Delta Electronics China. Delta Electronics COMMGR2 suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking. An attacker could exploit this vulnerability to execute...

9.8CVSS7.1AI score0.01002EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2026/03/16 12:00 a.m.•27 views

(Pwn2Own) Canon imageCLASS MF654Cdw dtdc_addr_importSub Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dtdcaddrimportSub method. The issue results from the la...

8.8CVSS9AI score0.00902EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•11 views

CVE-2026-0849: Buffer Copy without Checking Size of Input

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...

6.8CVSS6.1AI score0.0025EPSS
SaveExploits1References1
osv_oesa
osv_oesa
•added 2026/03/15 7:32 a.m.•27 views

OESA-2026-1626 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.5AI score0.00367EPSS
SaveExploits0References17
Rows per page
Query Builder