9886 matches found
CVE-2026-60095: Stack-based Buffer Overflow
Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlinkserver service that allows unauthenticated remote attackers to overwrite the saved return address by supplying an oversized listenuuid field that is measure...
ROS-20260709-73-0020
The vulnerability in ImageMagick7 is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
PT-2026-56802
Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlink server service that allows unauthenticated remote attackers to overwrite the saved return address by supplying an oversized listen uuid field that is...
ANT-2026-QPYFFTMS · gdal · Stack-buffer-overflow
stack-buffer-overflow high Severity Claude critical · Security research firm high revised; sealed as critical · Maintainer - Discovered by Claude Sonnet 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-QPYFFTMS:...
ANT-2026-GBSMA7AY · tz · Stack-buffer-overflow
stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-GBSMA7AY: Stack buffer overflow via...
ANT-2026-S6CB3P3P · bind9 · Stack Buffer Overflow
stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-S6CB3P3P: 03-bind9-matchnsec3-stack-bof In BIND's...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...
ALSA-2026:36734 Low: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 For more details about the security issues, including the impact, a CVSS score,...
RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:36633)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:36633 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server:...
CLSA-2026-1783093248 libxml2: Fix of CVE-2026-11979
CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell to prevent stack buffer overflows when parsing overly long command lines...
CLSA-2026-1783420753 radvd: Fix of CVE-2026-48715
CVE-2026-48715: fix stack buffer overflow in radvdump printff Route Information option parser via crafted ICMPv6 Router Advertisement...
duckdb:csv_json_fuzz_test: Stack-buffer-overflow in duckdb::StrpTimeFormat::Parse
Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5326739891617792 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: csvjsonfuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
RHEL 9 : xorg-x11-server (RHSA-2026:36085)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36085 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...
PT-2026-81893
Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack-based buffer overflow exists in the CGI Handler component. The issue occurs within the setSystemConfig function located in the '/cgi-bin/cstecgi.cgi' endpoint. A remote attacker...
CLSA-2026-1783095447 Fix CVE(s): CVE-2026-11979
SECURITY UPDATE: stack buffer overflows in xmlcatalog --shell mode - debian/patches/CVE-2026-11979.patch: add bounds checks in the usershell command-line parser in xmlcatalog.c to prevent stack buffer overflows when parsing overly long command lines - CVE-2026-11979...
CLSA-2026-1783095251 Fix CVE(s): CVE-2026-11979
SECURITY UPDATE: stack buffer overflows in xmlcatalog --shell mode - debian/patches/CVE-2026-11979.patch: add bounds checks in the usershell command-line parser in xmlcatalog.c to prevent stack buffer overflows when parsing overly long command lines - CVE-2026-11979...
CLSA-2026-1783093006 libxml2: Fix of CVE-2026-11979
CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell to prevent stack buffer overflows when parsing overly long command lines...
SUSE SLED15 / SLES15 Security Update : editorconfig-core-c (SUSE-SU-2026:2731-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2731-1 advisory. This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: improper use of strcpy can lead to a...
ROS-20260702-73-0023
The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
Oracle Linux 9 : rrdtool (ELSA-2026-34156)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34156 advisory. 1.7.2-22 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 Tenable has extracted the preceding description block...