EUVD-2026-60316

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...

CVE-2026-73522 COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...

CVE-2026-73522

avtp_to_can() in COVESA Open1722's ACF-CAN listener increments a write index without bounds-checking against the 15-slot array size. An unauthenticated remote attacker sends a crafted UDP datagram with >15 ACF-CAN messages, overflowing the stack buffer to corrupt adjacent memory, enabling arbi...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

ANT-2026-GSDN3H7W · OpenSC · Stack Buffer Overflow

stack-buffer-overflow low CVE-2026-40528 Severity Claude low · Security research firm low · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-GSDN3H7W: Stack buffer overflow in...

ANT-2026-3SEPW083 · ncurses · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-3SEPW083: Stack buffer overflow in SGR mouse...

ANT-2026-CAH7XGSQ · lua · stack-overflow

stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...

ANT-2026-1FT5E1XF · lcms · Stack-buffer-overflow

stack-buffer-overflow low Severity Claude high · Security research firm high · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-1FT5E1XF: Stack-buffer-overflow in cmslut.c:1373 Wh...

ANT-2026-GSPVGEYA · gpg/libgcrypt · Stack Buffer Overflow

stack-buffer-overflow medium CVE-2026-41990 GHSA-78pv-qq8x-94px Severity Claude high · Security research firm - · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-GSPVGEYA: ML-DSA...

ANT-2026-BDHSQ5GE · hunspell · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-BDHSQ5GE: Stack-buffer-overflow in hunspell...

ANT-2026-V6YZYDKK · FreeType2 · Stack Buffer Overflow

stack-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-V6YZYDKK: Stack buffer overflow via pop aft...

ANT-2026-QRPT15J8 · duckdb · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-QRPT15J8: Stack-buffer-overflow in...

CVE-2026-71979 INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

CVE-2026-71979

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

CVE-2026-71979 INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

CVE-2026-71979 INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

EUVD-2026-60310

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

CVE-2026-71979

INDI Instrument Neutral Distributed Interface indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. Attackers...

CVE-2026-71979

INDI indiserver through 2.2.4.2 has a stack buffer overflow in MsgQueue.cpp triggered by unauthenticated remote attackers sending a single TCP packet on port 7624 with malformed XML tags exceeding 1024 bytes, causing an unbounded sprintf() write and daemon crash. Fixed in commit 96bbd7f. No in-th...

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...