CVE-2026-112335

Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in readsnortfull. Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer,...

EUVD-2026-118278

Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in readsnortfull. Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer,...

CVE-2026-94395

A flaw was found in SafeNet Authentication Client SAC. A stack-based buffer overflow vulnerability in the SIS token engine allows an attacker connecting a malicious physical or software-emulated smart card to execute arbitrary code with the privileges of the affected process. This flaw occurs...

CVE-2026-123203

A flaw was found in NEURON. A local attacker can cause a Denial of Service DoS and stack memory corruption by convincing a user or system to load a specially crafted model dataset containing oversized tokens. When the application parses these malformed data files, a stack-based buffer overflow...

CVE-2026-121969

A flaw was found in netrek-client-cow. A stack-based buffer overflow vulnerability in the handleSMessage function allows a Denial of Service DoS. A malicious server or a network attacker on an unencrypted connection can exploit this flaw by sending oversized or improperly terminated message...

CVE-2026-120063

A flaw was found in psqlODBC. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. When processing SQL queries with excessively long table or schema names, or crafted column names returned by a database server, the driver fails to properly...

CVE-2026-123202

A flaw was found in libnxml. This vulnerability allows a remote attacker to cause a Denial of Service DoS by crashing applications that process untrusted data. By supplying specially crafted XML or RSS feeds containing excessively long names ending in multi-byte characters, an attacker can trigge...

CVE-2026-122329

A flaw was found in SDLmixer. The library's Audio Interchange File Format AIFF decoder miscalculates memory offsets when decompressing audio samples, resulting in a stack-based buffer overflow. An attacker could exploit this vulnerability by supplying a specially crafted audio file, potentially...

CVE-2026-122328

A flaw was found in SDLmixer. A stack-based buffer overflow vulnerability exists in the WAV audio decoder when processing audio streams compressed with A-law or mu-law formats. By enticing a user or application to process a specially crafted WAV file, an attacker could overwrite stack memory,...

CVE-2026-112335: wazuh: Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader…

Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in readsnortfull. Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer,...

CVE-2026-120434

A flaw was found in Netpbm. An attacker could exploit this vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS by crashing the application. The flaw occurs in the picttoppm converter when processing a specially crafted PICT image containing an excessive number of...

glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.

A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...

CVE-2026-116572

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in modsofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and...

EUVD-2026-117734

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in modsofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and...

CVE-2026-116573

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overflow in modsofia when generating dialog-event notifications. A peer can establish a dialog with an excessively long SIP To-header user part and subsequently subscribe to that...

EUVD-2026-117730

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overflow in modsofia when generating dialog-event notifications. A peer can establish a dialog with an excessively long SIP To-header user part and subsequently subscribe to that...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

EUVD-2026-117647

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202

The libnxml library before version 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c. A remote attacker can trigger the overflow by providing XML or RSS feeds with element, attribute, DOCTYPE, or entity names of 1022 characters ending in a multi-byte UTF-8 character...