CVE-2026-81665 Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665

Corosync's Totem Process Group (totempg) suffers from a heap-based buffer overflow in its fragmented multicast message reassembly path. In release builds, the reassembly buffer lacks a runtime bounds check, allowing a network-adjacent attacker to send crafted multicast protocol messages that over...

CVE-2026-81665

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow Companion PoC for the Hunt-Benito article "One Multiply Too Many: CVE-2026-70638 — Integer Overflow in llama.cpp's Android JNI Heap Allocation" →...

CVE-2026-42533-POC

CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...

MiracleLinux 8 : gimp:2.8 (AXSA:2026-1773:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1773:01 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflo...

Linux Distros Unpatched Vulnerability : CVE-2026-84969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a...

Linux Distros Unpatched Vulnerability : CVE-2026-81665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer...

PT-2026-86268

Name of the Vulnerable Software and Affected Versions ntop nDPI versions prior to 6.0 Description An out-of-bounds heap write exists in the ndpi json string escape function. This occurs because the function lacks an enforceable maximum length for the destination buffer when escaping characters fo...

MiracleLinux 9 : wget-1.21.1-11.el9_8 (AXSA:2026-1757:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1757:02 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106455 advisory. GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

UBUNTU-CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

Linux Distros Unpatched Vulnerability : CVE-2026-85091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

UBUNTU-CVE-2026-84383

GHSA-g89c-p67h-r497: Heap buffer overflow in scalenearestneighbor via duplicate Alpha planes from nested iden/auxl items...

CVE-2026-83959

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-70649

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83959

Substance3D - Sampler (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction —a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ...

CVE-2026-53720

pymonocypher (Python bindings to the Monocypher C library) is vulnerable to a heap buffer overflow in the argon2i_32 function prior to version 4.0.2.8 . The root cause is a missing validation of the nb_blocks buffer size: if the caller supplies a buffer smaller than required by the API contract, ...

CVE-2026-53720 pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i32 implementation does not check the nbblocks size. If the caller does not provide a sufficiently large buffer based on the API contract, then argon2i32 will write past the end of the buffer and possib...