CLEANSTART-2026-IG79892 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loadi...

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

CLEANSTART-2026-WH89165 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CVE-2026-98730

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. A local user with access to the Bluetooth Host Controller Interface HCI user channel can inject an oversized transmission packet. Because the driver fails to validate packet length before copying data into a fixed-size memory...

EUVD-2026-108540

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

EUVD-2026-108555

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

PT-2026-121835

Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and...

Cisco Expressway Buffer Overflow DoS

The vulnerability of Cisco Expressway’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kaspersky Lab Buffer Overflow

The vulnerability of “Labyrinth Kasper” antivirus protection is related to the operation going beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of the product...

Cisco Expressway Micro-programming Buffer Overflow

The vulnerability of Cisco Expressway microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

Kakao buffer overflow vulnerability

Versions 0.1, 0.2, 0.3, and 0.4 of KAKAO contain a buffer error vulnerability. This vulnerability stems from improper handling of the hiddendim and classnum parameters in the khaiii::nn::Linear::open function within the JSON Config File Handler component, potentially leading to out-of-bounds read...

GStreamer 1.28.4 GstVideoMeta Heap Buffer Overflow

GStreamer version 1.28.4 contains a heap buffer overflow in libgstvideo when untrusted GstVideoMeta data is deserialized through unixfd. The included proof of concept causes a stock receiver pipeline to read outside the backing frame buffer. https://packetstorm.news/download/237272...

Zephyr buffer error vulnerability

Versions Zephyr 3.3.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the bthcitxsyncin function fails to perform length checks when copying HCI packets from the controller to the host’s USB transfer buffer; as a result, a buffer overflow occurs, potentially...

ROS-20261023-73-0104

The vulnerability in libheif is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20261023-73-0118

The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0130

The vulnerability of the Track::load function in the stsz/stts component, a decoder and file format encoder, is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

ROS-20261023-73-0088

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2026-135120

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...