UBUNTU-CVE-2026-43894

jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INTMAX-1 2147483646 digits, the D2U macro overflows during signed-int arithmetic. The wrapped negative value bypasses the heap-allocation size check, causes the function to use a 30-by...

PT-2026-39718

Name of the Vulnerable Software and Affected Versions jq versions prior to 1.8.2 Description A flaw exists in the decNumberFromString function when processing a number literal containing 2147483646 digits. This causes the D2U macro to overflow during signed-int arithmetic, leading to a wrapped...

CVE-2026-43894: Integer Overflow or Wraparound

jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INTMAX-1 2147483646 digits, the D2U macro overflows during signed-int arithmetic. The wrapped negative value bypasses the heap-allocation size check, causes the function to use a 30-by...

CVE-2026-42859: Buffer Copy without Checking Size of Input

Neat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication stack buffer overflow exists in neatvnc in the RSA-AES security type handler. An unauthenticated remote attacker who can reach the VNC listening socket can send a crafted security type 5 RSA-AES or security type 129 RSA-AES-25...

matio:matio_fuzzer: Stack-buffer-overflow in H5T__bit_copy

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6348110531198976 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

CVE-2026-43380: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/q54sj108a2 fix stack overflow in debugfs read The q54sj108a2debugfsread function suffers from a stack buffer overflow due to incorrect arguments passed to bin2hex. The function currently passes 'data' as the...

CVE-2026-29974

The kosma minmea GPS data parsing library, version 0.3.0 , is vulnerable to a stack buffer overflow within the minmea_scan function. The root cause is a format specifier that copies NMEA field data into a caller-provided buffer without a size parameter. An attacker providing specially crafted NME...

wireshark:fuzzshark_ip_proto-udp: Stack-buffer-overflow in proto_tree_add_item_new_ret_length

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6715924815347712 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

CVE-2026-30814

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow...

SUSE-SU-2026:1755-1 Security update for freeipmi

This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses bsc1260414...

Security update for freeipmi

This update for freeipmi fixes the following issue: CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses bsc1260414. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Cisco RV340 SSL VPN unauthenticated RCE (CVE-2022-20699)

Stack buffer overflow in SSL VPN. Sends self.payload bytes ARM stager, optionally encoded by the framework padded to Metasploit layout, over TLS. !/usr/bin/env python3 -- coding: utf-8 -- CVE-2022-20699 — Cisco RV340 SSL VPN RCE Flashback / Metasploit-aligned. import secrets import socket import...

BIT-JAVA-2025-6021 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

SUSE CVE-2026-31772

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix stack buffer overflow in hcilebigcreatesync hcilebigcreatesync uses DEFINEFLEX to allocate a struct hcicplebigcreatesync on the stack with room for 0x11 17 BIS entries. However, conn-numbis can hold up to...

D-Link DI-8100 stack buffer overflow vulnerability

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a stack buffer overflow vulnerability. This vulnerability stems from the sprintf function in the file yyxz.asp, which fails to properly handle paramete...

CVE-2026-34459

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process sends an IPC request...

CVE-2026-34459: Stack-based Buffer Overflow

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process sends an IPC request...

CVE-2026-34461: Stack-based Buffer Overflow

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGIDSBIEINIRUNSBIECTRL message is handled before normal sandbox and impersonation checks, and for non-sandbox...

The vulnerability of the /goform/SafeMacFilter microprogramming software for Tenda 4G300 routers, which allows a attacker to trigger a service failure.

The vulnerability of the /goform/SafeMacFilter microprogramming-based router software from Tenda 4G300 is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the remove_whitespace function in the Corosync cluster engine, allowing a malicious actor to trigger a service failure

The vulnerability of the removewhitespace function in the Corosync cluster engine is related to buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...