coturn:FuzzStunClient: Stack-buffer-overflow in is_http

Project: https://github.com/coturn/coturn.git Detailed Report: https://oss-fuzz.com/testcase?key=4778243818586112 Project: coturn Fuzzing Engine: libFuzzer Fuzz Target: FuzzStunClient Job Type: libfuzzerasancoturn Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

CVE-2026-40892: Stack-based Buffer Overflow

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl::calcPosesSize

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4777988268032000 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x75121f264e18 Crash State...

CVE-2026-40489

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ecglob that allows an attacker to crash any application using libeditorconfig by providing a specially crafted directo...

SAIL security vulnerabilities

SAIL is an open-source image decoding library developed by SAIL. SAIL has a security vulnerability, which stems from the RLE decoder in the TGA encoder/decoder’s asymmetric boundary checks. This vulnerability may lead to a stack buffer overflow...

K000160853: Multiple Vim vulnerabilities

Security Advisory Description CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an...

CVE-2026-40170

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2qlogparameterssettransportparams serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::Mesh::getLodLevel

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5575038031167488 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7b0a60d2e5d8 Crash State...

UBUNTU-CVE-2026-40919

A flaw was found in GIMP. This vulnerability, a buffer overflow in the file-seattle-filmworks plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service DoS, leading to the plugin crashing and potential...

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

CVE-2026-40916: Out-of-bounds Write

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

PT-2026-35107

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images...

Tenda F456 stack buffer overflow vulnerability (CNVD-2026-37071)

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the failure of the fromexeCommand function in /goform/exeCommand to properly handle the cmdinput parameter. No detailed details about the vulnerability are...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the formWrlsafeset function not properly handling the mitssid parameter. No detailed details about the vulnerability are currently available...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability. This vulnerability stems from the formwebtypelibrary function in the /goform/webtypelibrary file, which fails to properly handle the manufacturer/Go parameter. Currently, no...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456. Patch Instructions: To install this SUSE update u...

TOTOLINK A3002MU security vulnerabilities

Totolink A3002MU is a wireless router product that provides network connectivity and wireless access. A stack buffer overflow vulnerability exists in the Totolink A3002MU. The vulnerability stems from a failure to properly handle the wan-url parameter in the HTTP request handling component, which...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37075)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the fromAdvSetWan function in /goform/AdvSetWan, which fails to properly handle the wanmode/PPPOEPassword parameters. Currently, no detailed...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37076)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the failure of the formL7ImForm function in /goform/L7Im to properly handle the page parameter. Currently, no detailed details about the...