CVE-2026-93433

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

CVE-2026-93433 Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

CVE-2026-93433 Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

CVE-2026-93433

A stack buffer overflow in libstoragemgmt's _sg_parse_vpd_80() function allows a local or virtual storage device controlled by an attacker to supply malformed SCSI VPD page 0x80 data with an untrusted page length field. This can crash or destabilize the process querying the serial number, resulti...

EUVD-2026-84117

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

CVE-2026-93433

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

AZL-105060 CVE-2026-61674 affecting package fluent-bit 3.1.10-7

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-90558

A flaw was found in sngrep. This vulnerability involves stack buffer overflows in the Session Initiation Protocol SIP attribute formatting routines. A remote attacker can exploit this by crafting malicious SIP packets with oversized header values, such as Call-ID or X-Call-ID, which exceed the...

chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia

A stack buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497591594...

The vulnerability of the digest_final() function in the openssl/src/md_ctx.rs module of the OpenSSL library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digestfinal function in the openssl/src/mdctx.rs module of the OpenSSL library is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

EulerOS Virtualization 2.10.0 : radvd (EulerOS-SA-2026-3887)

According to the versions of the radvd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack...

PT-2026-96148

Name of the Vulnerable Software and Affected Versions Fluent Bit versions 0.11.0 through 5.0.7 Description A stack buffer overflow exists in the secure forward pong function within plugins/out forward/forward.c. The issue occurs when the software copies a server-controlled PONG reason into a...

CVE-2026-93433: Stack-based Buffer Overflow

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

PT-2026-96244

Name of the Vulnerable Software and Affected Versions libstoragemgmt affected versions not specified Description A flaw exists where an attacker controlling a local or virtual storage device can provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. ...

EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2026-3840)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...

EulerOS Virtualization 2.10.1 : radvd (EulerOS-SA-2026-3853)

According to the versions of the radvd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack...

SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2026:4007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4007-1 advisory. This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parseprogressline for...