CVE-2025-43504

When Good /bins Go Bad: A Remote Pre-Authentication Overflow in LLDB's debugserver Introduction Growing up, I always enjoyed digging through the DVD bins at my local Walmart. I noticed a lot of the same movies were left on top, but if you actually dug in, you'd find more interesting and niche...

CVE-2026-58498

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffer-overflow in the official router-ipv6 application shipped with bacnet-stack, this results in an out-of-bounds write to the global transmit...

CVE-2026-62973

The BACnet Stack C library for embedded systems contains a remote out-of-bounds read vulnerability in the official BACnet client application apps/readpropm (commit e2bdbf6). Specifically, when readpropm issues a legitimate ReadPropertyMultiple request to a malicious BACnet/IP peer, the peer can p...

CVE-2026-62973 BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, a remote out-of-bounds read exists in the official BACnet client application apps/readpropm in bacnet-stack commit e2bdbf6. When readpropm sends a legitimate...

CVE-2026-62973 BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, a remote out-of-bounds read exists in the official BACnet client application apps/readpropm in bacnet-stack commit e2bdbf6. When readpropm sends a legitimate...

CVE-2026-58498

The BACnet Stack C library for embedded systems contains a remote global-buffer-overflow in the official router-ipv6 application. The vulnerability exists in the routed APDU forwarding path and leads to an out-of-bounds write to the global transmit buffer under ASan. This issue affects versions p...

CVE-2026-58498 BACnet Stack: Remote global-buffer-overflow in apps/router-ipv6/main.c routed APDU forwarding path

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffer-overflow in the official router-ipv6 application shipped with bacnet-stack, this results in an out-of-bounds write to the global transmit...

proftpd-rewrite-utf8trans

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · proftpd-rewrite-utf8trans Write-up: https://abraxaslabs.tech/research/proftpd-rewrite-utf8trans proftpd-rewrite-utf8trans Class: Crash Reach: Remote ProFTPD 1.3.9d f59f248 - ProFTPD proftpd.org contrib modrewrite ship...

PT-2026-146961

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffer-overflow in the official router-ipv6 application shipped with bacnet-stack, this results in an out-of-bounds write to the global transmit...

CVE-2025-50361

Global Buffer Overflow in SmallBASIC SmallBASIC is a fast and easy to learn BASIC language interpreter ideal for everyday calculations, scripts and prototypes. SmallBASIC includes trigonometric, matrices and algebra functions, a built in IDE, a powerful string library, system, sound, and graphic...

CVE-2026-52786

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

CVE-2026-52786 BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

CVE-2026-52786 BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

CVE-2026-52786

The BACnet Stack C library (prior to versions 1.4.5 , 1.5.1 , and 1.6.0 ) contains a network-reachable memory corruption vulnerability in the official apps/epics client tool (specifically on v1.6.0-rc1). A malicious BACnet/IP endpoint can send a syntactically valid ReadPropertyMultiple-ACK contai...

CVE-2026-52786: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, in the official apps/epics client tool on v1.6.0-rc1 not in the generic BACnet RPM ACK decoder alone a malicious BACnet/IP endpoint can reply to the EPICS tool’s legitima...

PT-2026-146026

Name of the Vulnerable Software and Affected Versions BACnet Stack versions prior to 1.4.5 BACnet Stack versions prior to 1.5.1 BACnet Stack versions prior to 1.6.0 Description The official apps/epics client tool contains a global-buffer-overflow in the response-processing path. A malicious...

CVE-2024-25165

A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...

CVE-2024-22912

A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

EUVD-2026-102351

AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...