Alibaba Cloud Linux 3 : 0243: vim (ALINUX3-SA-2026:0243)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0243 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55693: Vim is an open source,...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.7 (AXSA:2026-1507:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1507:08 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: gimp: Integer overflow in readRLEchannel CVE-2026-58384 Tenable has...

PT-2026-69396

Name of the Vulnerable Software and Affected Versions libril sem.so versions prior to SMR Aug-2026 Release 1 Description A stack-based buffer overflow exists in the libril sem.so library. This flaw allows privileged local attackers to execute arbitrary code. A stack-based buffer overflow occurs...

EUVD-2026-53843

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-55980 Denial-of-service vulnerability in CatchPulse

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-55980

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-55980: Stack-based Buffer Overflow

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

PT-2026-68458

Name of the Vulnerable Software and Affected Versions CatchPulse affected versions not specified Description A stack buffer overrun allows an attacker to cause a denial-of-service condition. A stack buffer overrun occurs when a program writes more data to a buffer located on the stack than the...

CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

UBUNTU-CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

PT-2026-68140

Name of the Vulnerable Software and Affected Versions microtar affected versions not specified Description The mtar write file header and mtar write dir header functions in src/microtar.c contain a stack buffer overflow. This occurs because a caller-supplied entry name is copied into the 100-byte...

SUSE-SU-2026:23141-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

SUSE-SU-2026:23119-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-52506

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

PT-2026-67742

Name of the Vulnerable Software and Affected Versions WLAN Firmware affected versions not specified Description Memory corruption occurs when processing Device Capability Extended attributes within certain NAN Neighbor Awareness Networking Service Discovery Frames that contain invalid length...

MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-9.el8_10.1 (AXSA:2026-1442:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1442:02 advisory. gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer CVE-2026-59691 gstreamer: gstreamer: DTLS certificate...

CVE-2026-45538: Stack-based Buffer Overflow

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when siptojson is called in the routing script. Function siptojson modules/sipmsgops/sipmsgops.c copie...

PT-2026-67851

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 4.0.1 Description A stack buffer overflow occurs when processing a SIP message containing a header name longer than 255 bytes. This happens when the routing script calls the sip to json function, which copies header...