CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...

CVE-2026-112281

The libaribb24 (aribb24) library, through version 1.0.3 , is vulnerable to a stack-based buffer overflow in the decoder_handle_csi() function located in src/decoder.c. The root cause is the handling of unbounded CSI parameter bytes, which allows an attacker to write past a fixed 256-entry array. ...

CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.3.ML.1 (AXSA:2026-2082:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2082:05 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

PT-2026-117512

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A stack buffer overflow occurs during channel connection establishment when processing TLS certificates containing malformed distinguished names. This flaw allows a remote attacker to execute...

CVE-2026-12665: Stack-based Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

RHEL 7 : postgresql (RHSA-2026:84585)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84585 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

Exploit for CVE-2026-39127

boboverflow CVE-2026-39127 A stack buffer overflow in the lo...

nkoriyama aribb24 Buffer Error Vulnerability

nkoriyama aribb24 versions 1.0.3 and earlier have a buffer overflow vulnerability. This vulnerability stems from the decoderhandlecsi function in src/decoder.c, where there is a stack buffer overflow. Attackers can exploit this by providing unlimited CSI parameter files, causing FFmpeg or VLC to...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions before 3.4.0 of 3.3.x, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.4 and earlier versions of 3.6.x, 3.7.2 and earlier versions of 3.7.x, 3.8.0 to 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a buffer erro...

Grigory Chudov: A bug related to numerical errors

Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the ttadecoderinitgetinfo function not verifying header fields properly. Integer overflow leads to a stack buffer overflow in 32-bit builds. Attackers can exploit this vulnerabilit...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102693

The RIOT open-source microcontroller operating system is vulnerable to a remote stack buffer overflow in the ATWINC15x0 driver prior to version 2026.04 . The root cause is the use of strcpy within the _atwinc15x0_sta_set_current_ssid function, which copies an SSID without verifying the destinatio...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-68907

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

EUVD-2026-102911

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

CVE-2026-68907

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...