Linux wcn36xx_smd_print_reg_info_ind Heap Buffer Overflow DoS

The vulnerability of the wcn36xxsmdprintreginfoind function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

PT-2026-115647

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

PT-2026-115662

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0 sta set current ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE ATWINC15X0...

PT-2026-115635

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux parse uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

PT-2026-116125

A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116143

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...

Nginx UI Code Execution

The vulnerability of the nginxconfigadd function in the Nginx UI server’s user interface is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

PT-2026-116109

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user auth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as o...

CVE-2025-55640

GPAC MP4Box v2.4 is vulnerable to a heap buffer overflow in the stbl_AddSize function located in isomedia/stbl_write.c. An attacker can trigger a Denial of Service (DoS) by providing a specially crafted MP4 file. Remediation and specific exploit details are not provided in the documents.

CVE-2025-55653

GPAC MP4Box v2.4 contains a floating point exception within the gf_parse_lfrac function located in utils/error.c. The vulnerability is triggered when the software processes a crafted MP4 file containing a fraction string with a zero-denominator , causing the application to divide by zero. This re...

EUVD-2025-211111

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2026-46471

A heap-based buffer overflow vulnerability exists in GStreamer gst-plugins-good versions before 1.28.2 . The issue is located within the isomp4 plugin's qtdemux_parse_uuid function, which may read past the end of a heap-allocated buffer while parsing an MP4 file . This flaw could allow an attacke...

ROS-20261016-73-0003

The vulnerability of the ipv4senddestunreach function in the net/ipv4/route.c module of the Linux kernel is related to the assignment of zero pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-116176

A flaw was found in libarchive. An attacker can cause a Denial of Service DoS or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive entry copy mac metadata function...

PT-2026-115663

Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2026.07 Description In the DHCPv6 client, the parse reply function in sys/net/application layer/dhcpv6/client.c fails to perform minimum-length validation before passing IA PD and IA NA option bodies to sub-option parser...

PT-2026-116164

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.11.0 Description An authorization inconsistency exists in the AuthMiddleware.managerAuth function. When a request uses a valid environment access token via the X-Arcane-Agent-Token header, the system installs an...

PT-2026-116191

Summary The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to...

PT-2026-115626

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The storage status-change REST service allows location records associated with DICOM instances to be transitioned to deletion-related states. Specifically,...

Linux kernel srpt_get_desc_tbl Heap Buffer Overflow

The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...