CVE-2026-18297 GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2026-18297

GStreamer's OGG file parser copies user-supplied data to a stack buffer without length validation, enabling stack overflow and remote code execution when a victim opens a malicious OGG file. Exploitation requires user interaction. No specific affected versions or patch are provided in the documen...

MINI-FRV4-VMJ5-CCXP

Bulletin has no description...

CLSA-2026-1786477142 Fix of 6 CVEs

SECURITY UPDATE: integer overflow in the TIM reader leading to an out-of-bounds read on 32-bit systems - debian/patches/CVE-2025-66628.patch: compute imagesize through HeapOverflowSanityCheckGetSize and reject a size larger than the blob in ReadTIMImage in coders/tim.c - CVE-2025-66628 SECURITY...

wasmtime:wast_tests: Stack-buffer-overflow in <wasmtime::runtime::store::StoreOpaque>::allocate_continuation

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6455086528921600 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: wasttests Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address...

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

CVE-2026-19582

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy...

DEBIAN-CVE-2026-19582

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...

AZL-97446 CVE-2026-19582 affecting package binutils 2.41-13

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...

UBUNTU-CVE-2026-19582

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...

CVE-2026-19582

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy...

CVE-2026-19582

Removed by vendor...

EUVD-2026-63197

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...

CVE-2026-19582

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write. Mitigation Do not open unknown files and/or files from an untrusted source using binutils...

CVE-2026-19582

This CVE describes a stack buffer overflow out-of-bounds write in binutils 2.46.1 and prior , triggered when a user opens a crafted PE file , potentially leading to arbitrary code execution . Red Hat rejected the CVE, concluding it is false due to upstream security policy: binutils treats its inp...

EUVD-2026-62973

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

EUVD-2026-63101

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

PT-2026-79221

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

PT-2026-78885

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.46.1 Description Opening a specially crafted PE Portable Executable file can lead to arbitrary code execution. This occurs due to a stack buffer overflow out of bounds write within the rsrc print name function...