CVE-2026-90472 msgpack-java through 0.9.12 Stack Overflow via Nested Arrays

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472

msgpack-java through version 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue(), which recursively deserializes arrays and maps without enforcing nesting depth limits. An unauthenticated, network-based attacker can craft a payload with deeply nested arrays to exhaust ...

CVE-2026-90472 msgpack-java through 0.9.12 Stack Overflow via Nested Arrays

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

exploit.pub

Exploit Modeling Lab — Windows / x86 stack buffer overflow st...

PT-2026-90780

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description A stack buffer overflow exists in the plugin loading mechanism within the PluginsManager::loadPluginFromPath function. The issue occurs because the result of the GetLexerCount function, provided by...

PT-2026-90635

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90558: Stack-based Buffer Overflow

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

PT-2026-90718

Name of the Vulnerable Software and Affected Versions sngrep versions prior to 1.8.4-2.1 Description Stack buffer overflow issues exist in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. An attacker can send malicious SIP packets containing oversized header...

Linux Distros Unpatched Vulnerability : CVE-2026-80927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is...

Linux Distros Unpatched Vulnerability : CVE-2026-89653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: reject exporttargets ranks = CEPHMAXMDS in mdsmap decode MDSMap exporttargets entries are monitor controlled. checknewmap uses each entry as a bit number ...

Linux Distros Unpatched Vulnerability : CVE-2026-89587

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816...

Linux Distros Unpatched Vulnerability : CVE-2026-19201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-80944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller- provided data buffer in cmdnode-databuf. Several callers...

Linux Distros Unpatched Vulnerability : CVE-2026-90558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit...

Linux Distros Unpatched Vulnerability : CVE-2026-81007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: ipmb: validate write message length ipmbwrite read message fields before validating the length byte. A zero or short write can read uninitialized stack...

Linux Distros Unpatched Vulnerability : CVE-2026-89759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/kmemleak: avoid soft lockup when scanning task stacks Patch series mm/kmemleak: avoid soft lockup when scanning task, v3. kmemleakscan scans every task stack...

Linux Distros Unpatched Vulnerability : CVE-2026-80978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can...

Linux Distros Unpatched Vulnerability : CVE-2026-80975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char...

Linux Distros Unpatched Vulnerability : CVE-2026-89600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer t...