Astra Linux – Vulnerability in ofono

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder, which could lead to an out-of-bounds write when processing a crafted image. This issue has been fixed in...

Astra Linux – Vulnerability in libyaml-syck-perl

Versions of YAML::Syck up to 1.36 for Perl have several potential security vulnerabilities, including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The Base64 decoder could read past the buffer end due t...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository vim/vim before version 9.0.0220...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 8.2.4436...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 8.2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – Fix for u8 overflow in the SSID scan buffer size calculation. The variable valuesize is declared as u8, but it accumulates the total length of all SSIDs that need to be scanned. Each SSID occupies up to 33 bytes...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Chromium, and LibVpx

A heap buffer overflow occurred in the vp8 encoding process in libvpx within Google Chrome before version 117.0.5938.132. In version 1.13.1 of libvpx, a remote attacker could potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in ANGLE in Google Chrome prior to version 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in binutils

Heap buffer overflow vulnerability in binutils’ readelf before version 2.40, caused by the function findsectioninset in the file readelf.c...

Security Bulletin: IBM MQ is vulnerable to unauthenticated remote code execution (CVE-2026-10747)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's protocol handling that could allow an unauthenticated remote attacker with network access to the listener port to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10747 DESCRIPTION: IBM MQ could...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-10858)

Summary IBM MQ has addressed a heap buffer underflow vulnerability in the queue manager's protocol handling that could allow a remote authenticated attacker to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11716)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's cluster migration message handler Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during...

Security Bulletin: IBM MQ client is vulnerable to remote code execution (CVE-2026-11727)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the MQ client's MQOPEN reply handler that could allow a rogue queue manager or man-in-the-middle attacker on an unencrypted channel to execute arbitrary code on a connecting client Vulnerability Details CVEID:CVE-2026-11727...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

Important: Red Hat Security Advisory: postgresql18 security update

An update for postgresql18 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...