CVE-2021-3156-Exp

CVE-2021-3156-Exp L'exploit di CVE-2021-3156. Dopo una notte di ricerche, finalmente ce l'ho fatta! Grazie https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...

Astra Linux – Vulnerability in libwebp

A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...

ALSA-2026:58927 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...

DEBIAN-CVE-2026-19968

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...

CVE-2026-18784 o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...

SUSE-SU-2026:3491-1 Security update for libgcrypt

This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684...

RockyLinux 8 : libtiff (RLSA-2026:47184)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47184 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...

JLSEC-2026-1090

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...

PT-2026-65945

Sony XAV-9500ES l2 reassemble sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

CVE-2026-48372

Format Plugins (Adobe) suffers a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). A security update (Adobe APSB26-87) addresses critical vulnerabilities in Format Pl...

CVE-2026-48372

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-17572

A flaw was found in HDF5, a data management library. This vulnerability, a heap-based buffer overflow, allows a local attacker to cause a denial of service DoS by persuading a user to open a specially crafted HDF5 file. The malformed file can trigger out-of-bounds memory operations, leading to...

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the untransform function of the THeaderTransport process. An attacker can achieve arbitrary code execution or cause a denial of service by sending specially crafted data that triggers a heap buffer overflow...

UBUNTU-CVE-2026-61721

heap-based buffer overrun for DLS samples...

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...

SUSE-SU-2026:22919-1 Security update for libgcrypt

This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684...