OESA-2026-1312 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact...

OESA-2026-1311 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact...

CVE-2026-2016 happyfish100 libfastcommon base64.c base64_decode stack-based overflow

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has bee...

CVE-2026-2016

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has bee...

CVE-2026-2016 happyfish100 libfastcommon base64.c base64_decode stack-based overflow

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has bee...

CVE-2026-2016

CVE-2026-2016 affects happyfish100 libfastcommon up to version 1.0.84. The vulnerability is in the base64_decode function in src/base64.c, causing a stack-based buffer overflow. Local access is required to exploit. Public disclosure of the exploit is noted. The patch identifier is 82f66af3e252e3e...

CVE-2026-2016 happyfish100 libfastcommon base64.c base64_decode stack-based overflow

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has bee...

EUVD-2026-5685

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has bee...

CVE-2025-15555

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hssogsdiamcxmarcb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGSKEYLEN results in stack-based buffer overflow. The attack may be...

Time security vulnerabilities

time is a date and time handling library in Rust developed by Time. Versions of time from 0.3.6 to 0.3.47 contained a security vulnerability. This vulnerability occurred when user-provided inputs were passed to types that parse RFC 2822 formats, potentially leading to a denial-of-service attack d...

IP-COM W30AP security vulnerabilities

The IP-COM W30AP is a wireless access point device from the US company IP-COM. The IP-COM W30AP version 1.0.0.111340 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of the parameter “data” in the function R7WebsSecurityHandler within the...

PT-2026-6804

Name of the Vulnerable Software and Affected Versions ggml-org llama.cpp versions prior to 55abc39 Description A flaw exists in the GBNF Grammar Handler component of ggml-org llama.cpp. Specifically, the llama grammar advance stack function within the llama.cpp/src/llama-grammar.cpp file is...

llama.cpp security vulnerabilities

Llama.cpp is a multimodal model developed by Georgi Gerganov. Versions of Llama.cpp with the version number 55abc39 and earlier contain security vulnerabilities, which stem from a stack buffer overflow in the GBNF syntax processor...

PT-2026-6719

Name of the Vulnerable Software and Affected Versions IP-COM W30AP versions up to 1.0.0.111340 Description A stack-based buffer overflow exists in the R7WebsSecurityHandler function within the POST Request Handler component. This issue is triggered by manipulating the data argument sent to the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-005272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005272 advisory. GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

Autodesk 3ds Max < 2026.3.2 Multiple Vulnerabilities

The version of Autodesk 3ds Max installed on the remote Windows host is prior to 2026.3.2. It is, therefore, affected by the following vulnerabilities: - A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor...

Linux stmmac_rx() Buffer Overflow DoS

The vulnerability of the stmmacrx function in the Linux operating system’s kernel is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Atlassian Jira Service Management Data Center and Server 5.12.0 < 5.12.29 (JSDSERVER-16465)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16465 advisory. - Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This...

CVE-2020-37126

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...

CVE-2020-37126 Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...