100657 matches found
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
CVE-2026-57201 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...
EUVD-2026-111220
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...
CVE-2026-57201
The Asterisk telephony toolkit is vulnerable to a stack buffer overflow in the H.323 ooTrace() trace-logging function. This occurs because an unbounded vsprintf write can exceed a fixed 2048-byte buffer . A remote attacker who can reach the publicly accessible port of the chan_ooh323 addon channe...
CVE-2026-57201 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...
Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache Portable Runtime Utility
Summary IBM HTTP Server used by IBM WebSphere Application Server is affected by multiple vulnerabilities due to Apache Portable Runtime Utility. Vulnerability Details CVEID:CVE-2026-32327 DESCRIPTION: A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library...
CVE-2026-48379
Adobe Substance 3D Painter is affected by a Stack-based Buffer Overflow (CWE-121) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Practical exploitation requires user interaction, specifically when a victim opens a malic...
CVE-2026-48379 Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-93857
A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy...
CVE-2026-90442
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request...
CVE-2026-113881
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request...
CVE-2026-103593
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...
CVE-2026-103594
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by...
CVE-2026-107672 Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user...
EUVD-2026-111150
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...
EUVD-2026-111151
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request...
CVE-2026-90442
A stack-based buffer overflow vulnerability exists in the Fireware OS certd process . An authenticated attacker with access to the Firebox management interface can exploit this by sending a specially crafted request. The vulnerability may cause the certificate management service to crash (Denial ...
CVE-2026-113881
A stack-based buffer overflow vulnerability exists in the Fireware OS VPN Network Access Enforcement process. This flaw allows an authenticated mobile VPN user to cause a denial of service condition or potentially achieve unprivileged code execution by sending a specially crafted request. No spec...
CVE-2026-103593 Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...