Lucene search
+L

35332 matches found

Cvelist
Cvelist
added 2026/03/12 7:38 p.m.53 views

CVE-2026-32259 ImageMagick has a possible stack buffer overflow in sixel encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS0.00096EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/12 7:38 p.m.8 views

CVE-2026-32259

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS6AI score0.00096EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 7:38 p.m.5 views

CVE-2026-32259 ImageMagick has a possible stack buffer overflow in sixel encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS6AI score0.00096EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/12 7:38 p.m.9 views

CVE-2026-32259 ImageMagick has a possible stack buffer overflow in sixel encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2026/03/12 7:38 p.m.51 views

CVE-2026-32259

ImageMagick contains a stack-buffer write due to a memory allocation failure in the sixel encoder, affecting versions prior to 7.1.2-16 and 6.9.13-41. The flaw can lead to memory corruption on the stack and is fixed in 7.1.2-16 and 6.9.13-41. Impact details in the CVE indicate local attack vector...

6.7CVSS6AI score0.00096EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/03/12 6:30 p.m.12 views

EUVD-2026-11591

A security vulnerability has been detected in Tenda i12 1.0.0.62204. The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

9CVSS6.5AI score0.00568EPSS
SaveExploits1References6
NVD
NVD
added 2026/03/12 6:16 p.m.7 views

CVE-2026-32141

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS0.00807EPSS
SaveExploits1References14
OSV
OSV
added 2026/03/12 6:16 p.m.3 views

DEBIAN-CVE-2026-32141

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS7.5AI score0.00807EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/12 6:16 p.m.8 views

UBUNTU-CVE-2026-32141

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS5.8AI score0.00807EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/12 6:8 p.m.16 views

CVE-2026-32141

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS5.8AI score0.00807EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/03/12 6:8 p.m.75 views

CVE-2026-32141

The CVE concerns the flatted library (circular JSON parser). Before version 3.4.0, flatted.parse() uses a recursive revive() phase to resolve circular references; crafted payloads with deeply nested or self-referential $ indices can cause unbounded recursion, leading to a stack overflow that cras...

7.5CVSS5.8AI score0.00807EPSS
SaveExploits1References14Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 6:8 p.m.4 views

CVE-2026-32141 flatted: Unbounded recursion DoS in parse() revive phase

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS5.9AI score0.00807EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/03/12 6:8 p.m.7 views

CVE-2026-32141

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse function uses a recursive revive phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow...

7.5CVSS7.5AI score0.00807EPSS
SaveExploits1
NVD
NVD
added 2026/03/12 4:16 p.m.8 views

CVE-2026-4043

A security vulnerability has been detected in Tenda i12 1.0.0.62204. The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

9CVSS0.00568EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/12 3:32 p.m.30 views

CVE-2026-4043

CVE-2026-4043 describes a stack-based buffer overflow in the Tenda i12 firmware 1.0.0.6(2204), caused by the function formwrlSSIDget in the file /goform/wifiSSIDget . The issue can be triggered remotely and has been publicly disclosed, indicating exploitability. Affected component: WiFi SSID retr...

9CVSS6.5AI score0.00568EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/12 3:32 p.m.53 views

CVE-2026-4043 Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow

A security vulnerability has been detected in Tenda i12 1.0.0.62204. The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

9CVSS0.00568EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/12 3:32 p.m.3 views

CVE-2026-4043 Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow

A security vulnerability has been detected in Tenda i12 1.0.0.62204. The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

9CVSS6.5AI score0.00568EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/12 3:16 p.m.8 views

CVE-2026-4042

A weakness has been identified in Tenda i12 1.0.0.62204. The affected element is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. This manipulation of the argument index causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made...

9CVSS0.00794EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/03/12 3:2 p.m.35 views

CVE-2026-4042 Tenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflow

A weakness has been identified in Tenda i12 1.0.0.62204. The affected element is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. This manipulation of the argument index causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made...

9CVSS0.00794EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/12 3:2 p.m.22 views

CVE-2026-4042

CVE-2026-4042 affects Tenda i12 firmware 1.0.0.6(2204). The flaw is in the function formWifiMacFilterGet (file /goform/WifiMacFilterGet), where argument index manipulation causes a stack-based buffer overflow. The description indicates the vulnerability may be exploited remotely and that the expl...

9CVSS6.4AI score0.00794EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder