EUVD-2026-25396

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

CVE-2026-31630: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pISpc output The AFRXRPC procfs helpers format local and remote socket addresses into fixed 50-byte stack buffers with "%pISpc". That is too small for the longest current-tree IPv6-with-port...

PT-2026-36555

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504809218 Crash type: Stack-buffer-overflow READ Crash state: is http stun get message len str FuzzStunClient.c...

coturn:FuzzStunClient: Stack-buffer-overflow in is_http

Project: https://github.com/coturn/coturn.git Detailed Report: https://oss-fuzz.com/testcase?key=4778243818586112 Project: coturn Fuzzing Engine: libFuzzer Fuzz Target: FuzzStunClient Job Type: libfuzzerasancoturn Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

CVE-2026-40892: Stack-based Buffer Overflow

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl::calcPosesSize

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4777988268032000 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x75121f264e18 Crash State...

CVE-2026-40489

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ecglob that allows an attacker to crash any application using libeditorconfig by providing a specially crafted directo...

SAIL 安全漏洞

SAIL is an open-source image decoding library developed by SAIL. SAIL has a security vulnerability, which stems from the RLE decoder in the TGA encoder/decoder’s asymmetric boundary checks. This vulnerability may lead to a stack buffer overflow...

K000160853: Multiple Vim vulnerabilities

Security Advisory Description CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::Mesh::getLodLevel

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5575038031167488 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7b0a60d2e5d8 Crash State...

UBUNTU-CVE-2026-40919

A flaw was found in GIMP. This vulnerability, a buffer overflow in the file-seattle-filmworks plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service DoS, leading to the plugin crashing and potential...

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

CVE-2026-40916: Out-of-bounds Write

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

Tenda F456 stack buffer overflow vulnerability (CNVD-2026-37071)

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the failure of the fromexeCommand function in /goform/exeCommand to properly handle the cmdinput parameter. No detailed details about the vulnerability are...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability. This vulnerability stems from the formwebtypelibrary function in the /goform/webtypelibrary file, which fails to properly handle the manufacturer/Go parameter. Currently, no...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the formWrlsafeset function not properly handling the mitssid parameter. No detailed details about the vulnerability are currently available...

PT-2026-35107

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456. Patch Instructions: To install this SUSE update u...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37076)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the failure of the formL7ImForm function in /goform/L7Im to properly handle the page parameter. Currently, no detailed details about the...

Tenda F451 stack buffer overflow vulnerability (CNVD-2026-37075)

The Tenda F451 is a 450Mbps SOHO wireless router launched by TENDA. The Tenda F451 has a stack buffer overflow vulnerability. This vulnerability stems from the fromAdvSetWan function in /goform/AdvSetWan, which fails to properly handle the wanmode/PPPOEPassword parameters. Currently, no detailed...