The vulnerability of the filein_process() function in the in_file.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-90445

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An out-of-bounds write exists in the sensor hub get feature function. The issue occurs because the function clamps its return value to the caller's buffer size, but the copy loop continu...

PT-2026-96438

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr update: fix stack buffer overflow in query capability query capability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfru update cap info using memcpy with the...

PT-2026-96467

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb write read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block wri...

Fedora 45 : bluez (2026-84b4f1c43a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84b4f1c43a advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

CVE-2026-80946: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req-in.h out to the ring in fuseuringcopytoring and req-out.h back in fuseuringcommit. Both headers live inside the fuserequest slab...

CVE-2026-86093

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...

Exploit for Stack-based Buffer Overflow in Microsoft

🛡️ AI Security Tool Module CVE-2026-4...

CVE-2026-86093 IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...

CVE-2026-86093

IBM Db2 versions 11.5.0–11.5.9 and 12.1.0–12.1.5 (Client, Server, and Db2 Connect editions, all platforms) are affected by a stack-based buffer overflow (CWE-121) in the DRDA server endpoint handling. An attacker who can control or impersonate a DRDA server endpoint can copy user-controlled data ...

DEBIAN-CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...

CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in TLS certificate processing (CVE-2026-12150)

Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow a remote attacker with a trusted TLS client certificate to cause a denial of service or affect memory contents through deeply nested certificate data during TLS certificate processing. Vulnerability Detai...

Security Bulletin: IBM MQ Appliance is affected by a stack buffer overflow vulnerability in XA transaction identifier processing (CVE-2026-11375)

Summary IBM MQ Appliance has addressed a stack buffer overflow vulnerability that could allow an authenticated attacker to cause a denial of service or execute arbitrary code through malformed XA transaction identifiers. Vulnerability Details CVEID:CVE-2026-11375 DESCRIPTION: IBM MQ could allow a...

CVE-2026-88047

A flaw was found in Tesseract. This vulnerability, a stack buffer overflow, occurs when the OCR engine processes a specially crafted .traineddata file. An attacker can exploit this by providing a malformed input, leading to stack corruption, a denial of service DoS, and potentially allowing for...

CVE-2026-88047

Tesseract (open-source OCR engine), versions 5.5.3 and earlier , is affected by a stack buffer overflow in Classify::ReadNormProtos (src/classify/normmatch.cpp). The function parses the NORMPROTO component of a .traineddata file using std::istream::operator>>(char*) into a fixed 61-byte sta...

CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...

EUVD-2026-75590

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...

CVE-2026-88047 Tesseract: ReadNormProtos stack buffer overflow

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...

CVE-2026-88047 Tesseract: ReadNormProtos stack buffer overflow

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...