PT-2026-90773

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

PT-2026-85341

Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...

CVE-2026-65108

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

PT-2026-85016

Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack overflow occurs in the hash table traversal code within metawalk.c. The issue arises because the alloca function is used with a size derived exponentially from the di depth field...

PT-2026-85018

Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack out-of-bounds write issue exists in the savemeta function. The height value retrieved from on-disk inode metadata is used as a loop bound without proper bounds checking. This leads...

PT-2026-90907

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

PT-2026-85020

Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack overflow occurs in the metadata walk code within metawalk.c. The issue arises because the alloca function is used with an untrusted inode height value retrieved from on-disk metada...

PT-2026-90906

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk di depth field without bounds validation. A crafted GFS2 filesystem image with a large di depth value causes stack exhausti...

CVE-2026-19795: Deserialization of Untrusted Data

Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input...

CVE-2026-71224: Allocation of Resources Without Limits or Throttling

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

CVE-2026-85437: Out-of-bounds Write

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-71219: Allocation of Resources Without Limits or Throttling

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-71219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the...

Linux Distros Unpatched Vulnerability : CVE-2026-71224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk...

UBUNTU-CVE-2026-65108

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

CVE-2020-11881

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:13+00:00| seen| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo 2026-09-03 00:00:53+00:00| published-proof-of-concept| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo...

AlmaLinux 9 : pipewire (ALSA-2026:61240)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61240 advisory. pipewire: RAOP RTSP NULL Deref CVE-2026-14324 pipewire: Pulse Server alloca Stack Overflow CVE-2026-14330 Tenable has extracted the preceding description...

CVE-2026-73783

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...

CVE-2026-73783 Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...