10073 matches found
CVE-2026-35083: Stack-based Buffer Overflow
A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root...
ANT-2026-MVVACQKN · freebsd/freebsd-src · Stack Buffer Overflow
oob-write high CVE-2026-4747 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-MVVACQKN: Unauthenticated remote code execution via svcrpcgssvalidate stack overflow svcrpcgssvalidate in the FreeBSD kernel...
SUSE-SU-2026:2225-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues - CreateSaverWindow Use-After-Free Information Disclosure. bsc1266301 - DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. bsc1266302 - Font Alias Stack-based Buffer Overflow. bsc1266294 - GLX ChangeDrawableAttributes...
BIRD security vulnerabilities
BIRD is a full-featured dynamic IP routing daemon developed by BIRD OpenSource. Versions of BIRD prior to 2.19.0 contained security vulnerabilities; these vulnerabilities stemmed from stack buffer overflows in the BGP ASPATH mask matching implementation, which could potentially cause the daemon t...
Orthanc DICOM Server security vulnerability
Orthanc DICOM Server is a lightweight medical imaging storage and management server developed under the open-source Orthanc framework. Versions of Orthanc DICOM Server 1.12.11 and earlier contain security vulnerabilities. These vulnerabilities stem from issues with the DcmItem::read function in t...
CVE-2026-43958 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...
TOTOLINK N300RH stack buffer overflow vulnerability
TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a stack buffer overflow vulnerability. This vulnerability stems from a function in the...
Assimp security vulnerabilities
Assimp is an open-source library developed by Assimp. It is used for importing and exporting various 3D model formats. Versions of Assimp 6.0.4 and earlier contain security vulnerabilities, which stem from issues with the HL1MDLLoader::readmeshes function in the HL1MDLLoader.cpp file. These...
Tenda W12 stack buffer overflow vulnerability
Tenda W12 is a AC1200 dual-band gigabit wireless panel-mounted AP launched by Tenda. The Tenda W12 has a stack buffer overflow vulnerability. This vulnerability stems from the setlocaltime0 function in httpd, which fails to properly handle the Time parameter, leading to a stack buffer overflow...
Tenda W12 stack buffer overflow vulnerability (CNVD-2026-36729)
Tenda W12 is a AC1200 dual-band gigabit wireless panel-mounted AP launched by Tenda. The Tenda W12 has a stack buffer overflow vulnerability. This vulnerability stems from the cgiWifiMacFilterSet function in the /bin/httpd file, which fails to properly validate the length of the parameter...
Tenda W12 stack buffer overflow vulnerability
The Tenda W12 is a AC1200 dual-band gigabit wireless panel-mounted AP launched by Tenda. The Tenda W12 has a stack buffer overflow vulnerability. This vulnerability stems from a parameter sec in the function cgiSysTimeInfoSet located in the bin/httpd file. An attacker can exploit this vulnerabili...
Tenda W12 stack buffer overflow vulnerability (CNVD-2026-36732)
The Tenda W12 is a AC1200 dual-band gigabit wireless panel-mounted AP launched by Tenda. The Tenda W12 has a stack buffer overflow vulnerability. This vulnerability stems from the cgistaKickOff function in the /bin/httpd file, which fails to properly handle the staMac parameter. As a result, stac...
Assimp security vulnerabilities
Assimp is an open-source library developed by Assimp. It is used for importing and exporting various 3D model formats. Versions of Assimp 6.0.4 and earlier contained security vulnerabilities. These vulnerabilities stemmed from a function in the 4x4 Matrix Parser component called...
Tenda W12 security vulnerabilities
Tenda W12 is a high-performance wireless access point from the Chinese company Tenda. Version 3.0.0.74763 of Tenda W12 contains a security vulnerability. This vulnerability stems from a parameter in the function cgistaKickOff, located in the file /bin/httpd, which causes a stack buffer overflow...
MariaDB: Stack Buffer Overflow via Crafted keyseg->start/ keyseg->length in .MYI File (MariaDB MyISAM)
A stack buffer overflow vulnerability was discovered in the MyISAM storage engine of MariaDB. The vulnerability was caused by lack of validation of the "keyseg-start" and "keyseg-length" fields read from the .MYI file. This allowed an attacker to write data beyond the bounds of a fixed-size stack...
Nintendo: [Switch] Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijack
A stack-based buffer overflow vulnerability was discovered in local wireless networking functionality. The vulnerability could be exploited through crafted network traffic to execute arbitrary code using return-oriented programming techniques...
AZL-89150 CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...
EUVD-2026-33322
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is possible to be carried out remotely. The...
CVE-2026-40510
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...