CVE-2026-106808

OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...

CVE-2026-120283: Linksys E8450: A vulnerability was identified in Linksys E8450 1.2.00.360516

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hiddentimezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this...

CVE-2026-120433: Netpbm: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the…

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

CVE-2026-106803

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsregistrarpcscf module. When processing a crafted application/reginfo+xml NOTIFY message, processcontact copies an attacker-controlled port value from the alias parameter into a fixed 5-byte stack buffer without validatin...

CVE-2026-106808

OpenAirInterface Core Network v2.2.1 is affected by a stack-based buffer overflow in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoint. The vulnerability occurs because the UDM passes attacker-controlled resynchronizationInfo.rand and auts values to the conv::hex_str_to_uint8() fun...

PT-2026-135538

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims qos npn module. The w rx aar register function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can...

CVE-2026-106804

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module. The wrxaarregister function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger...

CVE-2026-106808: n/a: OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU…

OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...

CVE-2026-29508: ReadyMedia ReadyMedia (MiniDLNA): ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that…

ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length...

CVE-2026-106804

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module. The wrxaarregister function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger...

PT-2026-135325

A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN 10003EA0 in the library DevDll 925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could...

CVE-2026-106804

Kamailio versions v6.1.3 and v6.1.4 are vulnerable to a stack-based buffer overflow in the ims_qos_npn module. The root cause is located in the w_rx_aar_register() function, which fails to validate the length of the host field copied from the SIP Via header before placing it into a fixed 46-byte ...

CVE-2026-120752: PyMuPDF: PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that…

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.addfreetextannot can supply four or more...

Linux Distros Unpatched Vulnerability : CVE-2026-120433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an...

PT-2026-135828

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM set annot callout line that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.add freetext annot can supply four o...

EUVD-2026-115345

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module. The wrxaarregister function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger...

PT-2026-135710

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description Multiple functions within ipphelper.c contain a stack-based buffer overflow caused by a missing bounds check. This flaw allows a remote attacker to cause a denial of service without...

CVE-2026-120434: Netpbm: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in…

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's scanPoly function in converter/ppm/picttoppm.c. Attackers can supply a crafted PICT file whose polygon edges produce more than 5000 points, overflowing the coord stack arr...

CVE-2026-120281: WAVLINK WN536AX6-A: A vulnerability was found in WAVLINK WN536AX6-A V260507

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpnip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made...

PT-2026-135537

Name of the Vulnerable Software and Affected Versions Kamailio versions 6.1.3 through 6.1.4 Description A stack-based buffer overflow occurs in the ims registrar pcscf module. The process contact function copies a port value from the alias parameter of a crafted application/reginfo+xml NOTIFY...