39406 matches found
K000163080: Linux kernel vulnerability CVE-2026-53267
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: bail out on template ct in get eval I noticed this issue while looking at a historic syzbot report 1. A rule like the one below is enough to trigger the bug: table ip t chain pre ty...
TencentOS Server 4: cpio (TSSA-2026:0856)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0856 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2026-80051: Improper Validation of Specified Type of Input
github.com/graphql-go/graphql GraphQL for Go through 0.8.1 does not validate that a scalar variable value matches its declared type. The built-in coerceString and coerceBool functions scalars.go accept input whose type does not match the declared String, ID, or Boolean scalar instead of raising t...
PT-2026-81472
github.com/graphql-go/graphql GraphQL for Go through 0.8.1 does not validate that a scalar variable value matches its declared type. The built-in coerceString and coerceBool functions scalars.go accept input whose type does not match the declared String, ID, or Boolean scalar instead of raising t...
EulerOS Virtualization 2.13.0 : libtiff (EulerOS-SA-2026-3222)
According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenab...
EulerOS Virtualization 2.13.1 : libtiff (EulerOS-SA-2026-3182)
According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenab...
PT-2026-86463
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.3 through 2.44 Description Converting specially crafted SHIFT JISX0213 input to UCS-4 or internal wide character encoding using functions such as iconv can cause the calling application to hang. This occurs because...
PT-2026-86427
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.38 through 2.44 Description Calling the functions strfmon and strfmon l can result in a buffer overflow where data is written past the end of the caller-supplied output buffer. This occurs when a conversion utilizes...
CVE-2026-75368
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...
CVE-2026-77658
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm/slab: Unbounded recursion in the free path has been prevented using a new kmalloc type. Commit 280ea9c3154b “mm/slab: Avoid allocating the slabobjext array from its own slab” prevents recursive allocation of objexts from kmall...
CVE-2026-75368
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...
CVE-2026-75368
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...
EUVD-2026-65115
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...
CVE-2026-75368
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...
PT-2026-81022
Name of the Vulnerable Software and Affected Versions SpaceDot AcubeSAT OBC software commit eaf90ec Description A stack overflow occurs in the loadRawData function when processing a specially crafted ECSS TC message. This flaw allows an attacker to trigger a Denial of Service DoS, which is a...
CVE-2026-75368
A stack overflow vulnerability exists in the loadRawData function of the SpaceDot AcubeSAT OBC software (commit eaf90ec ). This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted ECSS TC message . No information regarding specific remediation or exploit availabili...
PT-2026-84878
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.1 through 2.44 Description Calling the tdelete function on a sufficiently deep tree may result in writing one pointer past the end of an alloca-allocated array on the stack, potentially causing the application to crash...
CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...