CVE-2019-19204

CVE-2019-19204 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función fetchintervalquantifier anteriormente conocida como fetchrangequantifier en regparse.c, se llama a PFETCH sin comprobar PEND. Esto provoca una sobrelectura de búfer basada en montón. Investigador: ManhND d...

EUVD-2026-93991

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

EUVD-2026-93981

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

EUVD-2026-93943

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

CVE-2026-106063

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Confusión de Tipo Basada en Heap en L2CAP CVE-2020-12351 Linux: Confusión de Tipo Basada en Heap en L2CAP PoC CVE-2020-12351 en implementación BLE ¿Por qué modifiqué el PoC original? El PoC original Andy Nguyen, Google Security Research Team se centra en enviar un paquete l2cap malicioso a...

CVE-2026-105842

A flaw was found in lrzsz. A remote attacker acting as a malicious sender can trigger a heap-based buffer overflow by providing an excessively long filename during a ZMODEM file transfer. This flaw allows the attacker to corrupt memory and crash the application, resulting in a Denial of Service...

CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

EUVD-2026-93394

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

EUVD-2026-93364

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2021-3156-Exp

CVE-2021-3156-Exp El exploit de CVE-2021-3156. Después de investigar toda la noche, ¡por fin lo logré! Agradecimientos https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

PT-2026-106709

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

SUSE SLES15: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2026:4500-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4500-1 advisory. - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: out-of-bounds read vulnerability in...

Cisco ASA Heap-based Buffer Overflow (CVE-2023-20081)

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

PT-2026-106727

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

SUSE SLES15: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2026:4501-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4501-1 advisory. - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: out-of-bounds read vulnerability in...

glibc Vulnerable to Memory Corruption via Heap-Based Buffer Overflow in 'malloc.ca' File (CVE-2026-0861)

Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

SUSE-SU-2026:4502-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. - CVE-2026-94284: out-of-bounds read vulnerability in libX11's...