PT-2026-86299

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-86098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer...

PT-2026-86303

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...

AlmaLinux 10 : freerdp (ALSA-2026:61378)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service vi...

Linux Distros Unpatched Vulnerability : CVE-2026-84383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-g89c-p67h-r497: Heap buffer overflow in scalenearestneighbor via duplicate Alpha planes from nested iden/auxl items CVE-2026-84383 Note that...

AZL-99945 CVE-2026-86098 affecting package ntopng 5.2.1-6

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow in the ndpi_json_string_escape function, which writes beyond caller-supplied buffer boundaries. An attacker can trigger the overflow by supplying crafted network packet data — including TLS SNI , HTTP headers , or DNS names — that reach...

CVE-2026-86098 ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-57164

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the PJLIB-UTIL HTTP client when processing HTTP response bodies. A malicious or man-in-the-middle HTTP server can exploit this by sending a specially crafted response, leading to an incorrect size calculation and causing da...

DEBIAN-CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

AZL-99888 CVE-2026-81665 affecting package corosync 3.0.4-4

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

DEBIAN-CVE-2026-81665

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665 Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

EUVD-2026-70978

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665 Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

CVE-2026-81665

Corosync's Totem Process Group (totempg) suffers from a heap-based buffer overflow in its fragmented multicast message reassembly path. In release builds, the reassembly buffer lacks a runtime bounds check, allowing a network-adjacent attacker to send crafted multicast protocol messages that over...