EUVD-2026-64924

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

EUVD-2026-64922

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-76071

Netis NC63 (AC1200 Wireless Dual Band Gigabit MU-MIMO Router) firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in /bin/netis.cgi. The destHost parameter in the ipFilterList=mod action uses widthless %[^,] sscanf scansets that copy unbounded input into fixed 1...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-76070

Netis NC63 Wireless AC1200 router firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in the login handler /bin/netis.cgi. The custom Base64 decoder writes decoded password bytes into a fixed 64-byte stack buffer without capacity checks, allowing an unauthentica...

CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

EUVD-2026-64921

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...

CVE-2026-45698

A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without...

CVE-2026-71265

A flaw was found in Domoticz. The MochadTCP component in Domoticz contains a stack buffer overflow vulnerability. This flaw occurs when the MatchLine handler processes MOCHADRFSEC messages, copying network-received data into a fixed-size buffer without proper length checks. A remote attacker on t...

CVE-2026-74663

A flaw was found in the Linux kernel. An attacker could create overly deep queueing discipline qdisc hierarchies, leading to excessive recursion in qdisc tree walkers. This can exhaust the kernel stack, resulting in a Denial of Service DoS due to a system crash. Mitigation Mitigation for this iss...

CVE-2026-74656

A flaw was found in the Linux kernel's IPv4 networking stack. A use-after-free vulnerability exists in the fibnhcupdatemtu function due to a race condition during nexthop exception table updates. This allows for a scenario where memory can be freed while still being accessed, which can lead to a...

CVE-2026-74669

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploi...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mISDN: fixed an issue involving misuse of putdevice in mISDNregisterdevice. We should not release references to putdevice before calling deviceinitialize...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ALSA: usb-audio: fixed a stack information leak in RME Digiface status sndrmedigifacereadstatus reads a four-word status block from the device into an uninitialized on-stack le32 buffer buf4. Whenever the vendor control-IN...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RISC-V: probes: save the original sp in rethook trampoline Reading a word from the stack in a kretprobe causes a crash in the RISC-V kernel. bash $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211: The issue in ieee80211scanrx involves checking the skb length. This code requires hard-coded compile-time constants for determining the header length check. Instead, a dynamic determination based on the frame type shoul...