9887 matches found
CVE-2026-28494
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...
EUVD-2025-208419
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard534...
CVE-2026-3038
The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...
EUVD-2026-10303
A vulnerability was detected in Tenda FH1202 1.2.0.14408. The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Performing a manipulation of the argument webSiteId results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is no...
Tenda FH1202 security vulnerabilities
The Tenda FH1202 is a wireless router produced by the Chinese company Tenda. The version Tenda FH1202 1.2.0.14408 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters mitssid/mitssidindex in the formWrlsafeset function located in the...
Tenda FH1202 security vulnerabilities
The Tenda FH1202 is a wireless router produced by the Chinese company Tenda. The version Tenda FH1202 1.2.0.14408 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “page” in the function “fromP2pListFilter” within the file/goform/P2pListFilter,...
CVE-2026-3038: Out-of-bounds Write
The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...
D-Link DIR-513 Stack Buffer Overflow Vulnerability
D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...
CVE-2025-70243
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard534...
PT-2026-24072
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is triggered by providing a crafted value to the curTime parameter within the ''/goform/formSetWAN Wizard52'' endpoint...
D-Link DIR-513 security vulnerabilities
The D-Link DIR-513 is a wireless router product developed by D-Link Corporation. Version 1.10 of the D-Link DIR-513 contains a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formSetWANWizard534 function...
Tenda FH1202 security vulnerabilities
The Tenda FH1202 is a wireless router produced by the Chinese company Tenda. The version Tenda FH1202 1.2.0.14408 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter webSiteId in the function formWebTypeLibrary within the file/goform/webtypelibrary...
Tenda F453 security vulnerabilities
The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/WrlclientSet, specifically the parameter GO, which may lead to a stack...
freetype2:truetype-render-i35: Stack-buffer-overflow in Conic_To
Detailed Report: https://oss-fuzz.com/testcase?key=4797788289564672 Project: freetype2 Fuzzing Engine: honggfuzz Fuzz Target: truetype-render-i35 Job Type: honggfuzzasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7a48199d0440 Crash State: ConicTo...
dnsmasq:fuzz_util: Stack-buffer-overflow in hostname_issubdomain
Detailed Report: https://oss-fuzz.com/testcase?key=4674902966992896 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzutil Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7b6af7ad017f Crash State: hostnameissubdomain fuzzutil.c...
CVE-2026-29068
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...
CVE-2025-70229
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule...
CVE-2026-29068: Stack-based Buffer Overflow
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...
GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of decoding...
RHEL 10 : gnutls (RHSA-2026:3477)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3477 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such a...