CVE-2026-71935

Multiple DrayTek VigorSwitch models are affected by a stack-based buffer overflow in the webBackupAction function. The root cause is repeated string concatenation of the pathN , valueN , key , and option fields into fixed-size stack buffers without total length checks. A remote attacker with vali...

CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

EUVD-2026-64994

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

CVE-2026-71934

Multiple DrayTek VigorSwitch models are affected by a buffer overflow in the pingtrace function, caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker with valid administrative credentials for the device's web manage...

CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

EUVD-2026-64993

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

CVE-2026-71912

Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...

CVE-2026-71911 DrayTek VigorAP Multiple Models Buffer Overflow via setLan

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64970

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64971

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-71911

Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...

CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

ROOT-OS-DEBIAN-13-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root

Root has patched CVE-2026-58469 in the wget package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-77658

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread 's handling of MLE (Mesh Link Establishment) packets . An authenticated attacker on the same Thread network can send specially crafted packets to trigger assertion failures and a stack-based buffer overflow , resulting in a denial of service . The CNA-...

EUVD-2025-210766

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...