SUSE CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

PT-2026-79568

hashcat contains a heap-based buffer overflow out-of-bounds write in the outfile write function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZ LARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating tha...

Linux Distros Unpatched Vulnerability : CVE-2026-55893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and...

Linux Distros Unpatched Vulnerability : CVE-2026-68768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3678-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3678-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule PoC per la gestione dei percorsi alias DAV Questo repository fornisce un proof-of-concept exploit per CVE-2026-27654 , una vulnerabilità di heap overflow nel modulo ngxhttpdavmodule di nginx. Il bug deriva da un underflow di tipo sizet durante la gestione d...

CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

CVE-2026-18298

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-18296

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

nginx-rift-check

nginx-rift-check Trova configurazioni vulnerabili a CVE-2026-42945 , l'heap buffer overflow nel ngxhttprewritemodule di nginx. Eseguire una versione di nginx affetta dalla 0.6.27 alla 1.30.0 non basta perché la vulnerabilità sia sfruttabile. La configurazione deve contenere una coppia specifica d...

CVE-2026-21399

A flaw was found in the Intel Open Volume Kernel Library Intel Open VKL. This heap-based buffer overflow vulnerability, present in user applications, could allow an authenticated local attacker to trigger a denial of service. This attack has low complexity and requires no user interaction,...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

CVE-2026-76888

A flaw was found in Wireshark. A remote attacker could exploit a heap-based buffer overflow vulnerability within the RDP Remote Desktop Protocol dissector. By crafting a malicious RDP packet, an attacker could cause the Wireshark application to crash, leading to a denial of service. Mitigation Do...

nginx-map-risk-audit

CVE-2026-42533: مراجعة مخاطر NGINX Map Regex ملاحظة بحثية دفاعية حول CVE-2026-42533، وهو تجاوز سعة مخزن مؤقت في كومة الذاكرة heap buffer overflow في معالجة طلبات NGINX، مرتبط بتوجيهات map مع التقاطات تعبيرات نمطية وأنماط معينة لتقييم المتغيرات. بعبارات بسيطة: NGINX هو برنامج خادم ويب ووكيل عكسي...

CVE-2022-0185-Analysis-and-Exploit

CVE-2022-0185-Analysis-and-Exploit Forschung und Proof-of-Concept für die Heap-Overflow-Schwachstelle CVE-2022-0185 im Linux-Kernel. CVE-2022-0185 – Linux-Kernel-Heap-Overflow-Analyse Überblick CVE-2022-0185 ist eine heap-basierte Pufferüberlauf-Schwachstelle in der...

Exploit for CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLA...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the setregn function. An attacker can cause a four-byte heap buffer overflow by supplying crafted SH2A FPU bytecode processed through csdisasmiter or csdisasm with specific architecture and mode options,...

CVE-2026-42533-POC

CVE-2026-42533 Overflow del buffer heap e perdita di informazioni dall'heap pre-autenticazione in nginx, causati dalla mancata salvataggio/ripristino dello stato delle catture PCRE tra le due passate del motore degli script. Una variabile map basata su regex valutata tra due riferimenti di cattur...