CVE-2026-18370: Heap-based Buffer Overflow

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-42170: Incorrect Calculation of Buffer Size

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

PT-2026-69185

Name of the Vulnerable Software and Affected Versions libiec61850 versions prior to 1.6.2 Description A heap-based buffer overflow exists in the MMS Protocol Workflow component within the MmsMapping varAccessSpecToObjectReference function located in the src/iec61850/common/iec61850 common.c file...

CVE-2026-19259: Heap-based Buffer Overflow

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMappingvarAccessSpecToObjectReference of the file src/iec61850/common/iec61850common.c of the component MMS Protocol Workflow. Such manipulation of the argument...

PT-2026-69043

Name of the Vulnerable Software and Affected Versions libiec61850 versions prior to 1.6.2 Description A heap-based buffer overflow exists in the ASDU Element Handler component within the SVReceiver stopThreadless function located in the src/sampled values/sv subscriber.c file. This issue allows a...

CVE-2026-18497: Heap-based Buffer Overflow

A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbttGetGlyphShapeTT function within the nothings stbtruetype.h library when parsing malformed TTF TrueType Font file...

CVE-2026-19206: Heap-based Buffer Overflow

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the memcached client implementation. An attacker can execute arbitrary code or cause a denial of service by sending specially crafted data to the affected process. Remediation Upgrade apr-util to version...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the redis client implementation. An attacker can execute arbitrary code or cause a denial of service by sending specially crafted data to the affected process. Remediation Upgrade apr-util to version 1.6.5 ...

AZL-94634 CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-67873: Heap-based Buffer Overflow

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegmentencode validates only the standalone segment length via FileSegmentGetMaxDataSize and does not verify the residual capacity of the current ASDU frame befo...

CVE-2026-19156: Heap-based Buffer Overflow

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-34501: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-34502: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

PT-2026-68360

Name of the Vulnerable Software and Affected Versions lib60870-C version 2.4.0 Description A heap-based buffer overflow occurs in the server-side FileSegment ASDU encoding path. The issue arises because the FileSegment encode function validates only the standalone segment length using FileSegment...

CVE-2026-67867: Heap-based Buffer Overflow

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...

PT-2026-67773

Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited...

PT-2026-67882

Name of the Vulnerable Software and Affected Versions open62541 version 1.5.5 Description A heap-based buffer overflow occurs in the default HistoryRead path when the default history database is utilized with the memory backend. A heap-based buffer overflow is a memory corruption issue where a...

PT-2026-67814

Name of the Vulnerable Software and Affected Versions Keysight IxChariot Endpoint versions prior to 9.5.102 Description A heap-based buffer overflow exists, which occurs when a program writes more data to a heap memory block than it can hold. An unauthenticated remote attacker can send a speciall...

CVE-2017-20241: Heap-based Buffer Overflow

Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...