CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792562667)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792562667 advisory. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4817-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4817-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

EUVD-2026-108204

AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing...

PT-2026-121630

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow occurs in the command line interface, which may allow an unauthenticated remote attacker to execute arbitrary commands on the underlying host. This is possible if specific...

archivers/brotli -- Buffer Overflow/RCE

Google Security Team reports: A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial o...

Improper Google Brottli exception handling vulnerability

Versions 1.0.3 through 1.2.0 of Google Brotli contain a security vulnerability. This vulnerability stems from a buffer overflow in the Brotli decoder c/dec/decode.c. Unauthenticated remote attackers can exploit this by sending specially crafted Brotli compression streams, thereby corrupting memor...

Microsoft Visual Studio: CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

ROS-20261022-73-0095

The vulnerability in freerdp3 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a lack of boundary checks on endpoints within the device’s web interface. Unauthenticated remote attackers can exploit this flaw to trigger a buffer overflow, potentially allowing them to execute arbitrary commands on the underlying...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a buffer overflow issue in the PAPI protocol, which may allow authenticated remote attackers with elevated privileges to execute remote code execution and run arbitrary code as a privileged user on the underlying operating system...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a buffer overflow flaw in the API interface, which may allow authenticated high-privilege attackers to execute arbitrary code on the underlying operating system as a privileged user...

Bytecode Alliance wasmtime input validation error vulnerability

In versions prior to Bytecode Alliance Wasmtime 48.0.4, there is an input validation error vulnerability. This vulnerability stems from the failure to validate the type of results returned by asynchronous callbacks, leading to a stack buffer overflow. A malicious visitor can write approximately 1...

PT-2026-121737

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability...

ROS-20261022-73-0048

The vulnerability of the rabbitmq-c library is related to a heap buffer overflow when using the API function amqpsendframe for serializing the AMQPFRAMEBODY frame with an excessively large size. Exploiting this vulnerability allows a remote attacker to compromise the integrity, confidentiality, a...

ROS-20261022-73-0049

Vulnerability in the function railmain.c:railserverhandlemessages of the RDP client FreeRDP, related to buffer overflow, allowing an attacker to trigger a service failure...

PT-2026-121628

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description Multiple web interface endpoints in AOS-8 devices are susceptible to a buffer overflow when processing specially crafted requests. This flaw allows an unauthenticated remote attacker to execute...

Red Hat: CVE-2026-97631: edk2: Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

Microsoft Visual Studio: CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

SUSE SLED15 / SLES15 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2026:4764-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4764-1 advisory. - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap...

Rocky Linux 10.2 [CIQ] Security Update: fetchmail / fetchmail-debuginfo / fetchmail-debugsource (crlsa-2026_85959)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685959 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description blo...