PT-2026-67773

Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited...

PT-2026-67882

Name of the Vulnerable Software and Affected Versions open62541 version 1.5.5 Description A heap-based buffer overflow occurs in the default HistoryRead path when the default history database is utilized with the memory backend. A heap-based buffer overflow is a memory corruption issue where a...

PT-2026-67814

Name of the Vulnerable Software and Affected Versions Keysight IxChariot Endpoint versions prior to 9.5.102 Description A heap-based buffer overflow exists, which occurs when a program writes more data to a heap memory block than it can hold. An unauthenticated remote attacker can send a speciall...

CVE-2017-20241: Heap-based Buffer Overflow

Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

CVE-2026-18784: Heap-based Buffer Overflow

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...

CVE-2026-67860: Heap-based Buffer Overflow

open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...

CVE-2026-20465: Heap-based Buffer Overflow

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

CVE-2026-18585: Heap-based Buffer Overflow

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.getfilelist of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer...

CVE-2026-10849: Heap-based Buffer Overflow

The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in responsejsoncb subsys/mgmt/hawkbit/hawkbit.c. The buffer is sized to hold the received body bytes but reserves no space for a terminating NUL. When the...

CVE-2026-68580: Heap-based Buffer Overflow

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

CVE-2026-68579: Out-of-bounds Write

FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...

PT-2026-76129

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...

PT-2026-76131

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

CVE-2026-54715: Heap-based Buffer Overflow

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. In version 1.10.2, parsebrowser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Age...

PT-2026-76375

A heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write. ================================================================ ==2158399==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x521000039500 at pc...

PT-2026-76296

A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing...

PT-2026-76300

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service...

PT-2026-76301

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...

PT-2026-76295

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the processing of XZ chunked data. An attacker can execute arbitrary code in the context of the current process by enticing a user to open a specially crafted XZ-compressed file or visit a malicious page...