CVE-2019-20326

CVE-2019-20326 GNOME gThumb y Linux Mint Pix utilizan el módulo cairoio para mostrar varios formatos de imagen con la biblioteca gráfica Cairo. En versiones de gThumb 3.8.3 y Pix 2.4.5, cairoio es vulnerable a un desbordamiento del búfer del montón mediante una imagen JPEG con un ancho o alto...

PT-2026-90716

Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist load when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-89530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a...

Linux Distros Unpatched Vulnerability : CVE-2026-89620

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in...

CVE-2026-89266

stb_vorbis (a single-file C library for Vorbis audio decoding) contains a heap buffer overflow in start_decoder() affecting versions through 1.22 . The root cause is a truncation of the codebook multiplicands allocation size from size_t to int, allowing a crafted Ogg Vorbis file with large entrie...

CVE-2026-54241 libde265: SAO sequential filter heap buffer overflow via signed integer overflow

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54241

libde265 , an open-source H.265/HEVC video codec, is affected by a signed 32-bit integer overflow in the SAO (Sample Adaptive Offset) sequential filter input-buffer size calculation. A crafted HEVC stream with large dimensions and 16-bit luma samples causes an undersized allocation, leading to an...

CVE-2026-89620

A flaw was found in the Linux kernel's HID Intel QuickSPI driver. A local attacker can exploit a heap buffer overflow by providing a specially crafted report through a hidraw SETREPORT/SETFEATURE ioctl. This allows the attacker to overflow a buffer with controlled length and content, potentially...

DEBIAN-CVE-2026-89620

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in quickspiallocreportbuf to the device-descriptor derived maxreportlen a fe...

CVE-2021-3156

CVE-2021-3156 Sudo anterior a 1.9.5p2 contiene un error de desfase de uno que puede resultar en un desbordamiento de búfer en el heap, lo que permite la escalada de privilegios a root mediante sudoedit -s y un argumento de línea de comandos que termina con un solo carácter de barra invertida...

CVE-2026-89620

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in quickspiallocreportbuf to the device-descriptor derived maxreportlen a fe...

CVE-2026-89620 HID: intel-thc-hid: intel-quickspi: validate report size before copy

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in quickspiallocreportbuf to the device-descriptor derived maxreportlen a fe...

EUVD-2026-76166

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

CVE-2026-18495

CVE-2026-18495 is a heap-buffer overflow in the tiff2pdf utility within libtiff , triggered by an integer truncation error when processing a crafted BigTIFF file. A 64-bit StripByteCounts value is truncated to 32 bits, causing an undersized memory allocation followed by an out-of-bounds copy, lea...

CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

nginx-rift-check

nginx-rift-check Finds configurations vulnerable to CVE-2026-42945 , the heap buffer overflow in nginx's ngxhttprewritemodule. Running an affected nginx version 0.6.27 through 1.30.0 is not enough to be exploitable. The configuration has to contain a specific pair of directives, and that pair is...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule Proceso de derivación del PoC y reflexiones Ámbito de aplicación: solo para laboratorios locales, entornos de reproducción autorizados, verificación de vulnerabilidades y análisis de reglas de protección. No lo utilice en objetivos no autorizados. Las idea...

PoC-CVE-2025-69419

CVE-2025-69419 – Reproducible de Desbordamiento de Búfer en el Montón de OpenSSL Resumen Este repositorio contiene un reproductor de prueba de concepto mínimo para CVE-2025-69419 que afecta versiones vulnerables de OpenSSL. El PoC demuestra la escritura fuera de los límites del montón reportada...