OESA-2026-4119 alsa-lib security update

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte pas...

OESA-2026-4109 tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos ...

OESA-2026-4110 tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos ...

OESA-2026-4108 tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos ...

OESA-2026-4107 tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos ...

The vulnerability of the Vim text editor, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-97621

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficientl...

ROS-20260925-73-0049

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-97621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack...

LibreOffice < 26.2.5 Multiple Vulnerabilities

The version of LibreOffice installed on the remote host is prior to 26.2.5. It is, therefore, affected by multiple vulnerabilities: - LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the...

Moderate: Red Hat Security Advisory: rrdtool security update

An update for rrdtool is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

OPENSUSE-SU-2026:21957-1 Security update for tesseract-ocr

This update for tesseract-ocr fixes the following issues: Changes in tesseract-ocr: - Update to version 5.5.3 sync with Factory: CVE-2026-73067: heap out-of-bounds read in SquishedDawg on crafted model boo1275623 CVE-2026-88047: stack buffer overflow in Classify::ReadNormProtos on crafted...

CVE-2026-58008 Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

CVE-2026-58008

A stack-based buffer overflow vulnerability exists in Altera Trusted Firmware on HPS , specifically due to an unchecked HKDF key-size input in EL3 . This flaw allows for the exploitation of improperly configured or implemented memory protections. The vulnerability affects Trusted Firmware version...

CVE-2026-58008 Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

CVE-2026-13465

A stack-based buffer overflow vulnerability exists in the Altera Trusted Firmware on HPS . The root cause is the exploitation of improperly configured or implemented memory protections . This vulnerability affects versions through socfpga_v2.14.0 . The impact includes high integrity and availabil...

CVE-2026-13465 EL3 Stack Buffer Overflow in FCS HKDF Request

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

CVE-2026-13465 EL3 Stack Buffer Overflow in FCS HKDF Request

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

fwupd:protobuf_fuzzer: Stack-buffer-overflow in g_atomic_ref_count_inc

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5318619387723776 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: protobuffuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ac79ecd01...