Tenda AC6 stack buffer overflow vulnerability

The Tenda AC6 is a dual-band gigabit wireless router launched by Tenda. The Tenda AC6 has a stack buffer overflow vulnerability. This vulnerability stems from improper validation of the length of input data for parameters WANT/WANS in the file/goform/WizardHandle. Attackers can exploit this...

CVE-2026-5295: Stack-based Buffer Overflow

A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wcPKCS7DecryptOri function in wolfcrypt/src/pkcs7.c. When processing a CMS EnvelopedData message containing an OtherRecipientInfo ORI recipient, the function copies an ASN.1-parsed OID into a fixed 32-byte stack buffer...

SUSE-SU-2026:0910-1 Security update for vim

This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip bsc1246602. - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow bsc1258229. - CVE-2026-28417: Fixed that a...

Fuji Electric V-SFT stack buffer overflow vulnerability

Fuji Electric V-SFT is a configuration software developed by Fuji Electric for its Monitouch series of programmable human-machine interfaces HMI. It is primarily used for creating and editing HMI screen programs, setting communication parameters, and debugging the system. Fuji Electric V-SFT has ...

Tenda CX12L security vulnerabilities

The Tenda CX12L is a home-use wireless router device from the Chinese company Tenda. The version 16.03.53.12 of the Tenda CX12L contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/webExcptypemanFilter, which may lead to a stack buff...

Tenda i12 security vulnerabilities

The Tenda i12 is a ceiling-mounted wireless access point produced by the Chinese company Tenda. Version 1.0.0.113862 of the Tenda i12 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters index and wlradio, which may lead to a stack buffer overflow atta...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5321099213864960 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OESA-2026-1807 ncurses security update

The ncurses new curses library is a free software emulation of curses in System V Release 4.0 SVr4, and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr...

WebRTC DoS

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

EUVD-2026-17688

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...

CVE-2026-34555

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

CVE-2026-34555

Technical specifics (affected products/versions/vector details) are not publicly provided in the supplied documents. The entry notes a stack-buffer-overflow in iccDEV CIccTagFixedNum::GetValues() prior to 2.3.1.6 and a patch in 2.3.1.6.

CVE-2026-34542

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

D-Link’s various products have security vulnerabilities

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-320L is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have security vulnerabilities, which stem fr...

CVE-2026-34555: Stack-based Buffer Overflow

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

Tenda CH22 security vulnerabilities

The Tenda CH22 is a network device produced by the Chinese company Tenda. Version 1.0.0.1 of the Tenda CH22 contains a security vulnerability. This vulnerability arises from incorrect handling of the parameter “mitlinktype” in the file/goform/QuickIndex, which may lead to a stack buffer overflow...

CVE-2026-34542: Stack-based Buffer Overflow

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

PT-2026-29390

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

iccDEV security vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained security vulnerabilities; these vulnerabilities were caused by specially crafted ICC configuration files that could lead to stack buffer overflo...

Tenda i12 Wireless Access Point Code Execution

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...