CVE-2025-62507

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

Fuji Electric Monitouch V-SFT-6 (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could crash the accessed device; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive...

CVE-2025-47360

CVE-2025-47360 affects an Automotive Software platform based on QNX. The issue is memory corruption (described as a stack-based buffer overflow) occurring while processing client messages during device management, with local attack vector and high impact on confidentiality, integrity, and availab...

OSV-2025-876 Stack-buffer-overflow in snmp_input

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457106694 Crash type: Stack-buffer-overflow READ 8 Crash state: snmpinput snmpparsetrapfuzzer.c...

PT-2025-45050

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT-6 affected versions not specified Description The software is susceptible to a stack-based buffer overflow when handling a specifically designed project file. Successful exploitation of this issue could allow an...

Fuji Electric V-SFT-6 安全漏洞

Fuji Electric V-SFT-6 is a Fuji Electric operator interface software from Fuji Electric, Japan. A security vulnerability exists in Fuji Electric V-SFT-6 that originates from a stack buffer overflow when processing specially crafted project files, which could lead to the execution of arbitrary cod...

FreeBSD : redis -- Bug in XACKDEL may lead to stack overflow and potential RCE (5523394e-b889-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5523394e-b889-11f0-9446-f02f7497ecda advisory. Google Big Sleep reports: A user can run the XACKDEL command with multiple ID's and trigger a stack...

PT-2025-44927

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description A memory corruption issue exists when processing client messages during device management. This is a stack-based buffer overflow. Recommendations At the...

[SECURITY] [DLA 4361-1] geographiclib security update

Debian LTS Advisory DLA-4361-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 03, 2025 https://wiki.debian.org/LTS Package : geographiclib Version : 1.51-1+deb11u1 CVE ID : CVE-2025-60751 Geographiclib is a C++ library to solve geodesic problems. A stack...

📄 HTMLDOC 1.9.13 Stack Buffer Overflow

HTMLDOC versions 1.9.13 and below proof of concept exploit that demonstrates a stack buffer overflow vulnerability. !/usr/bin/env python3 Exploit Title: HTMLDOC 1.9.13 - Stack Buffer Overflow Google Dork: N/A Date: 2025-08-26 Exploit Author: wulfgarpro Vendor Homepage:...

redis -- Bug in XACKDEL may lead to stack overflow and potential RCE

Google Big Sleep reports: A user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. The problem exists in Redis 8.2 or newer. The code doesn't handle the case where the number of ID's exceeds the...

Astra Linux – Vulnerability in libxml2

A flaw was discovered in the xmlBuildQName function of libxml2. Integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue may result in memory corruption or a denial of service when processing malicious input...

Astra Linux – Vulnerability in jpeg-xl

There exists a stack buffer overflow in libjxl. A specifically crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256MB, possibly up to 512MB, potentially exhausting the stack. An attacker can create a file that will lead to excessive memory usage. We recommend...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of “acpiid” if the “str” argument is at its maximum length...

CVE-2025-63465

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub422880 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63459

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub421CF0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63462

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub421A04 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63469

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub421BAC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63460

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub4222E0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63454

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the deviceId parameter in the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...