20211 matches found
CVE-2026-67867: Heap-based Buffer Overflow
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...
PT-2026-68360
Name of the Vulnerable Software and Affected Versions lib60870-C version 2.4.0 Description A heap-based buffer overflow occurs in the server-side FileSegment ASDU encoding path. The issue arises because the FileSegment encode function validates only the standalone segment length using FileSegment...
PT-2026-67814
Name of the Vulnerable Software and Affected Versions Keysight IxChariot Endpoint versions prior to 9.5.102 Description A heap-based buffer overflow exists, which occurs when a program writes more data to a heap memory block than it can hold. An unauthenticated remote attacker can send a speciall...
PT-2026-67882
Name of the Vulnerable Software and Affected Versions open62541 version 1.5.5 Description A heap-based buffer overflow occurs in the default HistoryRead path when the default history database is utilized with the memory backend. A heap-based buffer overflow is a memory corruption issue where a...
CVE-2026-67860: Heap-based Buffer Overflow
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-18784: Heap-based Buffer Overflow
A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...
CVE-2017-20241: Heap-based Buffer Overflow
Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...
PT-2026-67773
Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited...
CVE-2026-10849: Heap-based Buffer Overflow
The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in responsejsoncb subsys/mgmt/hawkbit/hawkbit.c. The buffer is sized to hold the received body bytes but reserves no space for a terminating NUL. When the...
CVE-2026-20465: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...
CVE-2026-18585: Heap-based Buffer Overflow
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.getfilelist of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer...
CVE-2026-68580: Heap-based Buffer Overflow
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...
CVE-2026-68579: Out-of-bounds Write
FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...
PT-2026-76129
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...
PT-2026-76131
A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...
PT-2026-76375
A heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write. ================================================================ ==2158399==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x521000039500 at pc...
CVE-2026-54715: Heap-based Buffer Overflow
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. In version 1.10.2, parsebrowser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Age...
PT-2026-76301
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...
PT-2026-76295
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...