CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

PT-2026-97950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the functions eswin clk register pll and eswin register clkdiv declare a clk init data structure on the stack but only initialize specific fields, namely parent data...

ROS-20260924-73-0035

The vulnerability of the iwlagnsendstakey function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

WS-2026-0172

In PHP 5.2.1 through 8.1.34, 8.2.x before 8.2.34, 8.3.x before 8.3.34, 8.4.x before 8.4.25 and 8.5.x before 8.5.10, phpfilterencodeurl in ext/filter/sanitizingfilters.c initialises only the first 255 entries of its 256-entry lookup table, so FILTERSANITIZEENCODED decides whether to percent-encode...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124490 advisory. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. Tenable has extracted the preceding descriptio...

Security update for freeipmi (important)

openSUSE security update: security update for freeipmi ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21883-1 Rating: important References: bsc1278719 bsc1278721 bsc1278722 bsc1278724 bsc1278726 bsc1278727 Cross-References: CVE-2026-85504...

RHEL 8 : libxml2 (RHSA-2026:71641)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71641 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

PT-2026-97828

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue occurs when a crafted oversized firmware image is processed, leading to an EL3 stack overflow during VAB authentication. This can result i...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

CVE-2026-88388: Stack-based Buffer Overflow

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-13465: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

PT-2026-98198

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.8.0 through 4.14.6 Description The getattributes function in src/os xml/os xml.c recursively processes XML attributes without a depth limit and allocates two large local buffers in each stack frame. An enrolled agent can submi...

CVE-2026-88359

The libfyaml 0.9.6 library is vulnerable to a stack exhaustion vulnerability within the fy_atom_iter_format() function. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside ...

CVE-2026-88388

Espruino 2v29 (commit bffc6d0 ) is vulnerable to a stack-based buffer overflow within the JavaScript error stack-trace handling path on 64-bit builds . A remote attacker can provide JavaScript input that triggers an exception, leading to the execution of jslPrintTokenLineMarker(). This function i...

PT-2026-98001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb/client component where the stack-allocated cifs open info data is not zero-initialized. This can result in the structure containing random data, potentially...

PT-2026-98284

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The SOAP XML parser contains a flaw where the cleanup xml node function recurses once per XML nesting level without a depth limit. An unauthenticated attacker ca...

PT-2026-105231

Security vulnerability affects the fluent-operator package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

PT-2026-104884

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2c smbus xfer emulated but that check runs too late for tracepoints and is skipped entirely when the...

RHEL 9 : libxml2 (RHSA-2026:71585)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71585 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

SUSE SLES15 Security Update : podofo (SUSE-SU-2026:4311-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4311-1 advisory. - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in...