FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem

A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...

FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses

A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow

A flaw was found in FreeIPMI. This vulnerability involves a stack-based buffer overflow that occurs when a Baseboard Management Controller BMC sends an oversized response during data reading. An attacker could exploit this by tricking an administrator into running FreeIPMI commands against a...

CLSA-2026-1792993673 libtiff: Fix of CVE-2026-52490

CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling...

CLSA-2026-1792993665 libtiff: Fix of CVE-2026-52490

CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling...

FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem

A stack-based out-of-bounds read vulnerability was found in the FreeIPMI ipmi-oem utility. When processing an abnormally short response from a Baseboard Management Controller BMC, the application over-reads the buffer. A malicious BMC could exploit this to crash the client application Denial of...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow

A flaw was found in FreeIPMI. This vulnerability involves a stack-based buffer overflow that occurs when a Baseboard Management Controller BMC sends an oversized response during data reading. An attacker could exploit this by tricking an administrator into running FreeIPMI commands against a...

freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler

A stack-based buffer overflow exists in FreeIPMI's ipmi-oem tool, in the Dell OEM handler for the get-system-info cmc-ipv6-info subcommand. The vulnerable function outputdellsysteminfocmcipv6info uses a 256-byte stack buffer but allows up to 65536 bytes of data to be copied from a BMC response...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow

A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected syste...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem

A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...

FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses

A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...

Moderate: Red Hat Security Advisory: freeipmi security, bug fix, and enhancement update

An update for freeipmi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

PT-2026-125130

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted message may lead to a denial-of-service...

PT-2026-125490

Name of the Vulnerable Software and Affected Versions Speex libspeex versions prior to 1.2.2 Description An out-of-bounds write occurs in the speex bits read whole bytes function within libspeex/bits.c due to improper handling of length truncation for non-owned SpeexBits buffers. An attacker can...

PT-2026-123414

The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers gen stable iid in subsys/net/ip/ipv6.c and RFC 8981 temporary interface identifiers gen temporary iid in subsys/net/ip/ipv6 pe.c with sys rand get. That API is documented as not cryptographicall...

Linux Distros Unpatched Vulnerability : CVE-2026-116149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a...

CentOS Linux 8 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793029519)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793029519 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow ...

PT-2026-125472

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl BMP Image::load bmp that allows attackers to corrupt stack memory by supplying an oversized BMP colors used field. Attackers can craft BMP or ICO files with colors used above 256 to overflow the 768-byte colormap array,...