CVE-2017-20286 DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...

CVE-2017-20286

The DevIL image library (versions through 1.8.0 ) is vulnerable to a heap-based buffer overflow in the iGetPalette() function located in il_gif.cpp. When loading a specifically crafted two-frame GIF image where the second frame utilizes disposal method 1 with a local color table, the software fai...

K000162607: NGINX map directive and regex matching vulnerability CVE-2026-93479

Security Advisory Description A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result cou...

K000162416: NGINX ngx_http_core_module vulnerability CVE-2026-15176

Security Advisory Description A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

EUVD-2026-100984

A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is...

DEBIAN-CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-73791

A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow...

CVE-2022-44318

Description of CVE-2022-44318 PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. Any project or library that uses Picoc also suffers from this issue. An example of this would be...

EUVD-2026-100950

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A heap buffer overflow exists in gst-plugins-base within the libgstvideo component. The vulnerability is caused by a failure to range-check GstVideoMeta metadata during deserialization, allowing plane strides and offsets to exceed the actual backing memory allocation. A local attacker controlling...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2023-40294-and-CVE-2023-40295

While I was running boron in my environment, I happened to stumble upon 2 heap buffer overflows in libboron libboron.so.2 version 2.0.8 when processing slightly malformed input. This has been officially tested on both Mac x8664 and Linux x8664: Files for reproduction reproduction.zip Compiling gi...

EUVD-2026-100946

A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow...

CVE-2026-73791 HPE NonStop Hpjmeter - Buffer overflow vulnerability

A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow...

CVE-2026-73791

A security vulnerability exists in HPE NonStop Hpjmeter (version T0866L50^AAM and earlier ) that can lead to stack and heap buffer overflow . This flaw could potentially result in memory corruption , Denial of Service (DoS) , or other local impacts. HPE has released a fix for this vulnerability; ...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backported the upstream fix for CVE-2025-48060 heap buffer overflow in jvstringempty to jq 1.6. Backport CVE-2025-48060 – Backported upstream commit c6e0416 “Fix heap buffer overflow when formatting an empty string” from a newer jq version to jq-1.6, adapting intern...