Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30695)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a buffer overflow vulnerability in Apache Traffic Server. This vulnerability stems from the headerrewrite plugin’s improper handling of memory during cookie operatio...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30699)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from the improper handling of inputs by the txnbox plugin controlled by attackers. Attackers can exploi...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30700)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from improper handling of substitute inputs by the regexremap plugin. Attackers can exploit this...

PT-2026-66270

Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

CVE-2026-51272

The connected AttackerkB entry documents a vulnerability in schreibfaul1 ESP32-audioI2S 3.4.5: a heap-based buffer overflow in latinToUTF8() used for Latin-1 to UTF-8 conversion. The code determines the required buffer size by simply doubling the input length and reallocates a heap buffer without...

CVE-2026-51292

CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...

The vulnerability of the me2600_xilinx_download() function in the drivers/comedi/drivers/me_daq.c module, which supports devices for collecting data from Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the me2600xilinxdownload function in the drivers/comedi/drivers/medaq.c module, which supports devices for collecting data from Linux operating systems, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiti...

Tenda TX9 sub_42EEE0 function buffer overflow vulnerability

Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub42EEE0 function in the file/goform/SetStaticRouteCfg, which fails to properly validate the length of the input...

CVE-2026-62343

CVE-2026-62343 – ImageMagick heap buffer over-write during morphology with a user-supplied invalid kernel. Affected products/versions: ImageMagick before 6.9.13-51 and 7.0.1-0, and before 7.1.2-26. The flaw is triggered during morphology operations using a crafted kernel, leading to a heap buffer...

php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD

A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocati...

CVE-2026-13308

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this...

CVE-2026-5056

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...

EUVD-2026-50559

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...

CVE-2026-13309

Affected product : Autel MaxiCharger AC Elite Home NFC interface. Vulnerability : stack-based buffer overflow in NFC card response handling that can lead to arbitrary code execution . Impact : attacker with physical access can execute code on the device, with full control in its context; benefits...

CVE-2026-13309 Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

CVE-2026-13309

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

EUVD-2026-50558

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

CVE-2026-63119 MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem use IOgets without a byte limit, allowing a peer that sends data without a newline to exhaust process memory. This...

CVE-2026-5056

GStreamer qtdemux CVE-2026-5056 is a stack-based buffer overflow affecting the qtdemux component. The flaw occurs while parsing UncompressedFrameConfigBox structures due to insufficient validation of user-supplied data length before copying into a fixed-size stack buffer, enabling arbitrary code ...