CVE-2026-90824

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

UBUNTU-CVE-2026-90824

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90824 GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-86318

A flaw was found in java-json-tools json-patch. A remote attacker could exploit a stack-based buffer overflow vulnerability in the JsonMergePatch.fromJson function by sending specially crafted JSON input. This could lead to a denial of service, making the affected system unavailable. Mitigation...

EUVD-2026-77756

MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...

Security Bulletin: IBM MQ queue manager is vulnerable to denial of service (CVE-2026-12150)

Summary IBM MQ has addressed an unbounded recursion vulnerability in the queue manager's TLS certificate parser that could allow a remote unauthenticated attacker with a valid TLS certificate to cause a denial of service Vulnerability Details CVEID:CVE-2026-12150 DESCRIPTION: IBM MQ could allow a...

CVE-2026-90693

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-82785

Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

EUVD-2026-77317

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-90692

CVE-2026-90692 affects the D-Link DIR-878 router (firmware 120B05 ). The vulnerability resides in the SetDynamicDNSIPv6Settings function within the Dynamic DNS IPv6 Settings component, where manipulation of the IPv6Address/Hostname argument leads to a stack-based buffer overflow . The attack can ...

EUVD-2026-77311

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

EUVD-2026-77306

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

EUVD-2026-77191

A security flaw has been discovered in D-Link DIR-823G 1.0.2B0520181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in stack-based buffer overflow. The attack ca...

CVE-2026-33963

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service...

TencentOS Server 4: gstreamer1-plugins-base (TSSA-2026:0996)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0996 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-90824: Stack-based Buffer Overflow

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-89020: Stack-based Buffer Overflow

MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...

CVE-2026-19542: Stack-based Buffer Overflow

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...