Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37075)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the fromAdvSetWan function in /goform/AdvSetWan, which fails to properly handle the wanmode/PPPOEPassword parameters. Currently, no detailed...

TOTOLINK A3002MU 安全漏洞

Totolink A3002MU is a wireless router product that provides network connectivity and wireless access. A stack buffer overflow vulnerability exists in the Totolink A3002MU. The vulnerability stems from a failure to properly handle the wan-url parameter in the HTTP request handling component, which...

Tenda F456 安全漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a security vulnerability. This vulnerability stems from an issue with the formWrlsafeset function in the goform/AdvSetWrlsafeset file, where there is a stack buffer overflow due t...

Tenda AC9 stack buffer overflow vulnerability

The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the decodePwd function in /goform/WizardHandle failing to handle the WANS parameter properly. Currently, no detailed details about the...

PT-2026-44272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow occurs in the target tg pt gp members show function when formatting LUN paths using snprintf into a 256-byte stack buffer. Because iSCSI IQN names can reach 223 bytes,...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1550)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1550 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 display...

Tenda AC9 stack buffer overflow vulnerability

The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the formQuickIndex function in the POST request handler failing to properly handle the PPPassword parameter. No detailed details about...

CVE-2019-25705 Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

Tenda F451 安全漏洞

The Tenda F451 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.7 of the Tenda F451 contains a security vulnerability. This vulnerability stems from the improper handling of the page parameter in the fmtL7ProtForm function within the httpd component, which may lead to a...

Tenda F451 安全漏洞

The Tenda F451 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.7 of the Tenda F451 contains a security vulnerability. This vulnerability stems from an improper handling of the page parameter in the fromDhcpListClient function within the httpd component, which may lead to...

CVE-2019-25705: Out-of-bounds Write

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

CVE-2026-4156 ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability

ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex EV chargers. Authentication is not required to exploit this...

EUVD-2026-21382

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...

The vulnerability of the kgssapi.ko module in the operating system kernel of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the kgssapi.ko module in FreeBSD operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-31894

Name of the Vulnerable Software and Affected Versions Notepad++ version 8.9.3 Description A stack-based buffer overflow exists in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backsla...

UBUNTU-CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::Mesh::getLodLevel

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5477062998818816 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7b35b87addd8 Crash State...

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

assimp:assimp_fuzzer_collada: Stack-buffer-overflow in Assimp::ColladaLoader::CreateAnimation

Detailed Report: https://oss-fuzz.com/testcase?key=4815251051970560 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x78c321ee0d30 Crash State:...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl_v1_8::isLodMixed

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5182823379304448 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x76ccce6355c8 Crash State...