CVE-2026-73522 COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...

CVE-2026-59902 Netty: Memory Exhaustion in SctpMessageCompletionHandler

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-59902

io.netty.handler.codec.sctp.SctpMessageCompletionHandler buffers SCTP fragments without enforcing a maxBufferedBytes limit. With defaults of 128 messages × 128 fragments × ~64KB chunks, an unauthenticated attacker can consume ~1GB per connection, causing OutOfMemoryError. Fixed in Netty 4.1.137.F...

CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-72033

A flaw was found in OrangeFS, a file system within the Linux kernel. An integer overflow occurs in the fillfrompart function when calculating the size of a directory entry. This happens because the size is computed as a 64-bit value but stored as a 32-bit value, allowing a large entry length to...

CVE-2026-72030

A flaw was found in the Linux kernel's libata-core component. A malicious device, or a local attacker with control over a device, could provide an invalid count for concurrent positioning ranges. This improper handling of input could lead to a buffer overflow, potentially causing the system to...

ANT-2026-87DJGDRB · wolfssl · Heap-buffer-overflow

heap-buffer-overflow low CVE-2026-12340 GHSA-q349-x427-xg3w Severity Claude high · Security research firm high · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-87DJGDRB: Heap-buffer-overflow in sha.c:733 When...

ANT-2026-P7DSVPH6 · wasm-micro-runtime · Heap-buffer-overflow

heap-buffer-overflow critical GHSA-wj3p-xhqm-pffc Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-P7DSVPH6:...

ANT-2026-669BEQ2W · WAMR · Heap Buffer Overflow

heap-buffer-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-669BEQ2W: Integer overflow in array.new size...

ANT-2026-5WVCAVEA · UPX · Heap Buffer Overflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-5WVCAVEA: Heap buffer overflow in unDTINIT...

ANT-2026-QRHVDRQ1 · Unicorn · Heap Buffer Overflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-QRHVDRQ1: Heap buffer overflow via MIPS CP0...

ANT-2026-KP4YD2Z6 · php/php-src · Memory Corruption / Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-KP4YD2Z6: DBA flatfile length parsing triggers heap...

ANT-2026-GSDN3H7W · OpenSC · Stack Buffer Overflow

stack-buffer-overflow low CVE-2026-40528 Severity Claude low · Security research firm low · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-GSDN3H7W: Stack buffer overflow in...

ANT-2026-YQ12XT7Y · openbabel · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-YQ12XT7Y: Heap-buffer-overflow in openbabel...

ANT-2026-1ZNMP148 · NSS · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-6772 GHSA-c2q7-642g-3vwr Severity Claude medium · Security research firm medium · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-1ZNMP148:...

ANT-2026-PJV7Z0AR · open62541 · Integer Overflow

integer-overflow high CVE-2026-63559 CVE-2026-65423 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-PJV7Z0AR: Integer...

ANT-2026-3SEPW083 · ncurses · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-3SEPW083: Stack buffer overflow in SGR mouse...

ANT-2026-CAH7XGSQ · lua · stack-overflow

stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...

ANT-2026-GPA6MCZ6 · libvips · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Sonnet 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-GPA6MCZ6: Heap-buffer-overflow in region.c:1614 In...

ANT-2026-0HC68EK6 · LibreOffice · Heap Buffer Overflow

heap-buffer-overflow medium CVE-2026-6047 Severity Claude medium · Security research firm medium · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-0HC68EK6: Heap Buffer Overfl...