CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-46572

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...

EUVD-2026-94355

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerabilit...

PT-2026-107389

Name of the Vulnerable Software and Affected Versions wolfSSL wolfSSH versions 1.4.11 through 1.5.0 Description An unsigned integer underflow occurs in the wstrncat function within src/port.c on non-Windows platforms. This issue allows an authenticated remote attacker to write a single null byte...

EUVD-2026-94358

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...

CVE-2026-46572

A heap-based buffer overflow exists in the ntfs_ib_cut_tail() function within libntfs-3g/index.c of NTFS-3G versions prior to 2026.7.7 . A local attacker can trigger this overflow by crafting a malicious NTFS filesystem image and creating a file within a specially crafted directory. This memory c...

CVE-2026-15894: Stack-based Buffer Overflow

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77372)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77372 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77371)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77371 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Linux Distros Unpatched Vulnerability : CVE-2026-106065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit...

CVE-2026-106062

A heap-based buffer overflow was found in GIMP\u2019s DirectDraw Surfa...

CVE-2026-42616

A heap buffer overflow exists in the ntfs-3g utility (specifically within the cat() function in ntfscat.c) for versions prior to 2026.7.7 . An attacker can trigger this vulnerability by providing a maliciously crafted NTFS filesystem image . When the ntfscat binary attempts to read a file from th...

CVE-2026-46569

A heap buffer overflow exists in NTFS-3G before version 2026.7.7 within the ntfs_ib_copy_tail() function located in libntfs-3g/index.c . A local attacker can exploit this by supplying a specially crafted NTFS filesystem image. Triggering the overflow via actions like extending a directory (e.g., ...

PT-2026-107382

Name of the Vulnerable Software and Affected Versions ASUS router affected versions not specified Description A stack-based buffer overflow occurs in the router modules. This issue allows an authenticated nearby user to execute arbitrary code by uploading a crafted configuration file that exceeds...

CVE-2026-107125: Heap-based Buffer Overflow

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument startingline causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address...

Linux Distros Unpatched Vulnerability : CVE-2026-105837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted tra...

Linux Distros Unpatched Vulnerability : CVE-2026-106067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77370)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77370 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791395301)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791395301 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes fo...