39409 matches found
CVE-2026-18303
GIMP (GNU Image Manipulation Program) is affected by a stack-based buffer overflow in its TIF file parser . The root cause is insufficient validation of user-supplied data length before copying it to a stack-based buffer, allowing a remote attacker to achieve arbitrary code execution in the conte...
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...
MINI-294G-8MVQ-VJJR
Bulletin has no description...
OESA-2026-3456 cpio security update
GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fixes: GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the...
OESA-2026-3418 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
CVE-2026-19582
...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
GO-2026-6185 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-JR6H-R7VG-F9MC vulnerabilities
Vulnerabilities for packages: druid...
GHSA-J3RV-75WM-77RM vulnerabilities
Vulnerabilities for packages: binutils...
PT-2026-83655
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarily bracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
PT-2026-79224
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...
PT-2026-79234
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a...
PT-2026-79102
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub 44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit h...
CVE-2026-12522
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-76584
A stack-based buffer overflow exists in the alphapd component of the TRENDnet TV-IP751WIC network camera (firmware 11.03.03), specifically in the file /cgi-bin/admin/set_time.cgi. The vulnerability is triggered by manipulating the Currenttime argument and can be exploited remotely with low privil...
CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...