101703 matches found
CVE-2026-85457
IBM Planning Analytics versions 2.0 and 2.1 are affected by a stack-based buffer overflow (CWE-121). This vulnerability could allow a remote authenticated attacker to perform arbitrary code execution . No specific exploit details or remediation instructions are provided in the documents.
CVE-2026-85457 IBM Planning Analytics Local is affected by security vulnerabilities
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...
CVE-2026-53922
The odhcpd DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt is vulnerable to a pre-auth remote Denial of Service (DoS) . In versions prior to commit cfddd56 , an unauthenticated host on the same link can trigger a size_t underflow within the dhcpv6_ia_handle_IAs function. By sendin...
CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...
CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...
EUVD-2026-97866
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...
RHLW-2026-F1A22CABC5A36F13 Lightwell Security Advisory: xstream 1.4.20.rhlw-00001
Red Hat Lightwell has released com.thoughtworks.xstream:xstream 1.4.20.rhlw-00001 with a backported security fix. CVE-2024-47072: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream This patched artifact is a drop-in replacement for...
RHLW-2026-C7695B3B26607B57 Lightwell Security Advisory: snakeyaml 1.30.0.rhlw-00013
Red Hat Lightwell has released org.yaml:snakeyaml 1.30.0.rhlw-00013 with backported fixes for CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, and CVE-2022-41854. CVE-2022-38750: DoS in SnakeYAML CVE-2022-38751: DoS in SnakeYAML CVE-2022-38752: DoS in SnakeYAML CVE-2022-41854: Stack Overflow in...
RHLW-2026-5EB0CB8050278DB4 Lightwell Security Advisory: protobuf-kotlin-lite 3.21.7.rhlw-00002
Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin-lite 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin-lite 3.21.7 from Maven Centr...
RHLW-2026-36D9ED0BB47C794F Lightwell Security Advisory: woodstox-core 6.2.2.rhlw-00004
Red Hat Lightwell has released com.fasterxml.woodstox:woodstox-core 6.2.2.rhlw-00004 with a backported security fix. CVE-2022-40152: Stack Buffer Overflow in Woodstox This patched artifact is a drop-in replacement for com.fasterxml.woodstox:woodstox-core 6.2.2 from Maven Central...
RHLW-2026-0F944E70846E7603 Lightwell Security Advisory: protobuf-kotlin 3.21.7.rhlw-00002
Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin 3.21.7 from Maven Central...
kernel: i2c: stub: Reject I2C block transfers with invalid length
A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...
inchi:molfile_fuzzer: Stack-use-after-return in move_explicit_Hcation
Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4713332356218880 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: molfilefuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...
Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by a vulnerability
Summary The apnotify utility was used by IBM Sterling Connect:Direct for UNIX in asset protection and may be seen in some IBM Connect:Direct for UNIX installation locations that have been upgraded in place since 2017 or earlier. IBM Sterling Connect:Direct for UNIX is impacted by a vulnerability ...
CLSA-2026-1791831421 Fix CVE(s): CVE-2026-80186, CVE-2026-85218
SECURITY UPDATE: stack buffer overflow parsing a remote EIR name - debian/patches/CVE-2026-80186.patch: clamp the name length to HCIMAXNAMELENGTH in name2utf8 in src/eir.c before copying it into the fixed-size stack buffer. - CVE-2026-80186 SECURITY UPDATE: stack buffer overflow in AVRCP...
CLSA-2026-1791831177 exim: Fix of CVE-2026-94056
CVE-2026-94056: read the full Proxy Protocol v2 header before using its length field, avoiding use of uninitialised stack data...
MGASA-2026-0484 Updated libextractor package fixes security vulnerabilities
GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...
