PT-2026-80973

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl general setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,...

PT-2026-80975

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag logmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

PT-2026-80976

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

PT-2026-80907

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description A stack-based buffer overflow exists in the login handler of the '/bin/netis.cgi' endpoint. The issue occurs because the custom Base64 decoder fails to validate the output length against a...

PT-2026-80885

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

PT-2026-80850

Name of the Vulnerable Software and Affected Versions RustDesk affected versions not specified Description Windows clipboard redirection fails to perform an upper bound check when copying a peer-supplied length into a fixed-size caller buffer. When an OLE paste consumer, such as explorer.exe, cal...

CVE-2026-71937: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...

CVE-2026-75368: Stack-based Buffer Overflow

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

CVE-2026-76070: Stack-based Buffer Overflow

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-71942: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mailmailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

CVE-2026-78169: Stack-based Buffer Overflow

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-71940: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

RHEL 9 : libtiff (RHSA-2026:58554)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58554 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

RHEL 10 : qemu-kvm (RHSA-2026:58571)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58571 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ONN...

ALSA-2026:58936 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

The vulnerability of the Eax_Decrypt() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the EaxDecrypt function in the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the decode_mask_image() function in the libheif/image-items/mask_image.cc file, a decoder and encoder for libheif file formats, allows a hacker to trigger a service failure.

The vulnerability of the decodemaskimage function in the libheif/image-items/maskimage.cc file, a decoder and encoder for libheif file formats, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service...