ROS-20260825-73-0017

The vulnerability of the liotargetnaclinfoshow function in the drivers/target/iscsi/iscsitargetconfigfs.c file of the Linux kernel’s TCM driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

PT-2026-81195

Name of the Vulnerable Software and Affected Versions file-roller affected versions not specified Description A flaw exists when opening or extracting malicious 7z or RAR archives containing a file entry with an excessively long path. The progress-line parsing mechanism copies the path into a...

PT-2026-81429

Name of the Vulnerable Software and Affected Versions Substance3D - Sampler affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-81443

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-81463

Name of the Vulnerable Software and Affected Versions Adobe XD affected versions not specified Description A Buffer Overflow occurs when a program writes more data to a block of memory than it can hold, potentially overwriting adjacent memory. This issue could allow an attacker to execute arbitra...

PT-2026-81437

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-66176

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

PT-2026-81856

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

PT-2026-81467

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-81493

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory...

PT-2026-81560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in WebGL, which allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a specially crafted HTML page. A buffer...

PT-2026-81721

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A buffer overflow exists in ANGLE, a compatibility layer that translates OpenGL ES calls to other graphics APIs. This flaw allows a remote attacker to execute arbitrary code...

httpd security update

2.4.62-13.0.1.el98.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.6 - Resolves: RHEL-190807 - httpd: use-after-free in modldap uldapconnectionfind via per-directory client cert list CVE-2026-29167 2.4.62-13.5 - Resolves: RHEL-192752 - modproxyhtml regression in...

CVE-2026-48431: Heap-based Buffer Overflow

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75750: Heap-based Buffer Overflow

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48423: Heap-based Buffer Overflow

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-81893

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647 B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible ...

The vulnerability of the i2c_s3cirq_nextbyte() function in the drivers/i2c/busses/i2c-s3c2410.c file of the I2C driver for the Linux operating system’s hardware layer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cs3cirqnextbyte function in the driver/i2c/busses/i2c-s3c2410.c file of the I2C hardware layer of the Linux operating system is related to the issue of writing operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerability of the Bluetooth AVRCP protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the Bluetooth AVRCP protocol analyzer and the traffic analysis module of Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the `ibmvfc_discover_targets_done()` function in the `drivers/scsi/ibmvscsi/ibmvfc.c` file of the Linux SCSI device driver module allows a attacker to access protected information or cause a service failure.

The vulnerability of the ibmvfcdiscovertargetsdone function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device driver module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access protected...