CVE-2026-78170: Buffer Copy without Checking Size of Input

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

RHEL 8 : libgcrypt (RHSA-2026:58979)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58979 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of...

RHEL 8 : libgcrypt (RHSA-2026:58978)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58978 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of...

The vulnerability of the MapServer geographic data rendering parser’s SLD system, related to buffer overflows, allows attackers to cause service failures.

The vulnerability of the MapServer geographic data rendering parser’s SLD system is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

RHEL 8 : libtiff (RHSA-2026:58545)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58545 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

ALSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

ALSA-2026:58938 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

gstreamer1-plugins-good security update

1.22.12-7.8 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 1.22.12-7.7 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 1.22.12-7.6 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 1.22.12-7.5 - Fix CVE-2026-1829...

RHEL 9 : libtiff (RHSA-2026:58556)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58556 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in the stack, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, related to writing beyond the buffer limit, allowing attackers to trigger a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow exploits. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

MiracleLinux 9 : libXfont2-2.0.3-12.el9_8.3 (AXSA:2026-1637:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1637:04 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow ...

ROS-20260824-73-0008

The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0298-1 Rating: important References: 1275913 Cross-References: CVE-2026-76017 CVE-2026-76018 CVE-2026-76019 CVE-2026-76020 CVE-2026-76021 CVE-2026-76022 CVE-2026-76023 Affected Products: openSUSE Backports...

Linux Distros Unpatched Vulnerability : CVE-2026-58081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

PT-2026-79807

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

PT-2026-80945

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...