CVE-2026-85505

FreeIPMI before 1.6.19 contains a stack-based buffer over-read in the ipmi-oem component, specifically in the function ipmi_oem_fujitsu_get_sel_entry_long_text (file ipmi-oem/ipmi-oem-fujitsu.c). The flaw is triggered when a Baseboard Management Controller (BMC) provides a short response , allowi...

EUVD-2026-70881

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

CVE-2026-85504

FreeIPMI before 1.6.19 is affected by a stack-based buffer overflow in the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text within libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c, triggered by malformed Fujitsu SEL long-text responses . The vulnerability is rated CVSS 9.8 (CRITICAL) w...

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

lighttpd 2.0.0 Out-Of-Bounds Access

A signedness vulnerability exists in the lichunkqueueappendmem function in lighttpd2, where a signed length parameter gssize len is not properly validated before being used in memory operations that expect an unsigned size. When a negative length value is supplied, it is implicitly converted to a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106201)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106201 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2026-106461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106461 advisory. GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

PT-2026-86168

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit a1b707c Description A stack buffer overflow occurs in the SRTP/SDES media transport when processing a=crypto attributes during the Session Description Protocol SDP offer/answer process. The issue resides in the...

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

CVE-2026-85509

FreeIPMI before 1.6.19 has a stack-based buffer overflow in readfrudata in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested...

The vulnerability of the __switch_to() function in the arch/arm/kernel/entry-armv.S module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the relocate_kernel() function in Linux’s x86/kexec components allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the relocatekernel function in Linux’s x86/kexec components is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-57165: Stack-based Buffer Overflow

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall handleupdown in clitelnet.c. This affects only applications that enab...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-106196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106196 advisory. A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into ...

PT-2026-86167

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response update service route in pjsua acc.c. This affects applications that register using the...

...[ More ]

A stack-based buffer overflow vulnerability exists in the htpasswd utility bundled with thttpd. The vulnerability occurs due to unsafe copying of a user-supplied command-line argument into a fixed-size stack buffer without proper bounds checking.Specifically, the program copies the username...

PT-2026-85400

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the get dell system info idrac info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when usi...

...[ More ]

A stack-based buffer overflow vulnerability exists in the redirect CGI program distributed with thttpd. The vulnerability is caused by unsafe string concatenation when constructing redirect URLs using attacker-controlled CGI environment variables. A remote, unauthenticated attacker can trigger th...