apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client

A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service...

apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21609-1 Rating: critical References: bsc1275706 Cross-References: CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037...

PT-2026-79654

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chg txt...

PT-2026-79529

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A stack-based buffer overflow exists in the NTP Timezone Configuration Handler within the uci safe get function of the /cgi-bin/apply time.cgi endpoint. This issue occurs because the function...

CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

CVE-2026-18303

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

CVE-2026-18298

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-18297

A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...

CVE-2026-18296

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

CVE-2026-17250 Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary...

CVE-2026-17250

A stack-based buffer overflow in the firmware update functionality of the TP-Link TL-MR6400 v7 router allows an authenticated attacker to trigger memory corruption and execute arbitrary code by supplying a crafted firmware image with malicious metadata. The vulnerability is scored CVSS 4.0: 8.5 (...

EUVD-2026-64006

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary...

Security Bulletin: This Power System update is being released to address CVE-2026-19234

Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...

CVE-2026-21399

A flaw was found in the Intel Open Volume Kernel Library Intel Open VKL. This heap-based buffer overflow vulnerability, present in user applications, could allow an authenticated local attacker to trigger a denial of service. This attack has low complexity and requires no user interaction,...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS

Summary Updated Aug 21, 2026: Updated the summary to highlight the additional installation instructions. IBM is providing security updates for supported AIX and VIOS releases that are under active fix support. Delivered through Service Packs SPs and Fix Packs FPs, these updates remediate...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

CVE-2026-76888

A flaw was found in Wireshark. A remote attacker could exploit a heap-based buffer overflow vulnerability within the RDP Remote Desktop Protocol dissector. By crafting a malicious RDP packet, an attacker could cause the Wireshark application to crash, leading to a denial of service. Mitigation Do...