chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia

A stack buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497591594...

CLSA-2026-1792993673 libtiff: Fix of CVE-2026-52490

CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling...

CLSA-2026-1792993665 libtiff: Fix of CVE-2026-52490

CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling...

UBUNTU-CVE-2026-115384

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions ...

PT-2026-125417

A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...

Osmocom osmo-msc security vulnerability

Osmocom osmo-msc versions 1.15.0 and earlier contain a security vulnerability. This vulnerability stems from a stack buffer overflow in the decodemmename function within src/libmsc/sgsiface.c, which may allow remote attackers to cause a denial of service...

CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

CVE-2026-116149

The software ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 is vulnerable to a stack-based buffer overflow during the handling of bzip2 compressed images . An attacker can provide a specially crafted image using bzip2 compression, which may lead to memory corruption or crashes when...

AlmaLinux 8 : flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac (ALSA-2026:88164)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:88164 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

Important: mariadb114

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Important: mariadb118

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Amazon Linux 2 : alsa-lib (ALAS-2026-4041)

The version of alsa-lib installed on the remote host is prior to 1.1.4.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4041 advisory. alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte...

Medium: alsa-lib

Issue Overview: alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state fil...

Important: gfs2-utils

Issue Overview: A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes...

Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2026_88164)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688164 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

CLSA-2026-1791463004 ghostscript: Fix of 3 CVEs

CVE-2026-39919: heap buffer overflow in the JPEG 2000 output adapter with subsampled components base/sjpxopenjpeg.c - CVE-2026-103226: stack buffer overflow in the pdfwrite Type 1 to Type 2 font converter control stack devices/vector/gdevpsfx.c...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...