PT-2026-80494

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length...

CVE-2026-11735: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality...

CVE-2026-64912: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

CVE-2026-62755: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

CVE-2026-70344: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-63526: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62824: Stack-based Buffer Overflow

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

JLSEC-2026-1242 ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyzestring in progs/infocmp.c...

PT-2026-80484

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze string in progs/infocmp.c...

CVE-2026-6791: Stack-based Buffer Overflow

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

CVE-2026-21068: Stack-based Buffer Overflow

Stack-based buffer overflow in librilsem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code...

PT-2026-69282

Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions prior to 2.5.3-170306 Description A remote attack is possible due to a stack-based buffer overflow in the strcpy function within the /goform/pptpSrvGlobalConfig file. This occurs when the EncryptionMode argument is...

CVE-2026-19341: Stack-based Buffer Overflow

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

CVE-2026-20345: Stack-based Buffer Overflow

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion...

PT-2026-68375

Name of the Vulnerable Software and Affected Versions ELAN Smart-Pad versions prior to ETD24.21.52.3 Description A stack-based buffer overflow occurs in the ETD.sys and ETDSMBus.sys drivers. During Intel SMBus recovery, ETDSMBus.sys fails to enforce an upper-bound check on the hardware-derived...

CVE-2026-18909: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-67866: Stack-based Buffer Overflow

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMacProcessMsgDeleteMonitoredItemsResponse and SOPCStaMacNewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path...

CVE-2026-71266: Stack-based Buffer Overflow

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

CVE-2026-71267: Stack-based Buffer Overflow

microtar's mtarwritefileheader and mtarwritedirheader functions src/microtar.c copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtarheadert via strcpyh.name, name, with no check that strlenname is less than 100 before the copy...