CVE-2026-122329

A flaw was found in SDLmixer. The library's Audio Interchange File Format AIFF decoder miscalculates memory offsets when decompressing audio samples, resulting in a stack-based buffer overflow. An attacker could exploit this vulnerability by supplying a specially crafted audio file, potentially...

CVE-2026-122328

A flaw was found in SDLmixer. A stack-based buffer overflow vulnerability exists in the WAV audio decoder when processing audio streams compressed with A-law or mu-law formats. By enticing a user or application to process a specially crafted WAV file, an attacker could overwrite stack memory,...

CVE-2026-116572

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in modsofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and...

EUVD-2026-117734

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in modsofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and...

CVE-2026-116573

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overflow in modsofia when generating dialog-event notifications. A peer can establish a dialog with an excessively long SIP To-header user part and subsequently subscribe to that...

EUVD-2026-117730

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overflow in modsofia when generating dialog-event notifications. A peer can establish a dialog with an excessively long SIP To-header user part and subsequently subscribe to that...

EUVD-2026-117647

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202

The libnxml library before version 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c. A remote attacker can trigger the overflow by providing XML or RSS feeds with element, attribute, DOCTYPE, or entity names of 1022 characters ending in a multi-byte UTF-8 character...

CVE-2026-123199

The eBook-speaker software versions 6.1.0 through 6.2.0 contains a stack-based buffer overflow vulnerability within the get_attributes() function in src/common.c. The root cause is an unbounded strcpy operation performed on an element's name attribute. An attacker can trigger this by crafting an ...

CVE-2026-123199 eBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute

eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in getattributes in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a name attribute of 511 or more characters to corrupt the stack and crash...

CVE-2026-94395 Stack-based buffer overflow in SafeNet Authentication Client SIS token engine

A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...

EUVD-2026-117636

A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...

CVE-2026-94395

A stack-based buffer overflow exists in the Thales SafeNet Authentication Client (SAC) SIS token engine. The vulnerability can be triggered by a malicious physical or software-emulated smart card during processing, occurring even before authentication or PIN entry. Impact includes a denial of ser...

CVE-2026-122329

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

CVE-2026-122328

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

EUVD-2026-117536

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

CVE-2026-122329 SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

CVE-2026-122328

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) contains a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_wav.c. The issue occurs during the decoding of A-law or mu-law WAV files . An attacker can provide a crafted WAV file that triggers a doubly-of...