CVE-2026-86919

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code...

EUVD-2026-104719

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code...

openSUSE 16 Security Update : jq (openSUSE-SU-2026:21833-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21833-1 advisory. - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770...

Red Hat: CVE-2026-92391: curl: curl: curl_mime_free stack overflow by recursion

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

CVE-2026-76788

The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...

GO-2026-6688 Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize

Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize...

GO-2026-6693 Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash) in github.com/corazawaf/coraza

Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow process crash in github.com/corazawaf/coraza...

github.com/go-openapi/swag: go-openapi/swag: Denial of Service via uncontrolled JSON recursion

A flaw was found in the go-openapi/swag library's jsonutils component. This vulnerability, caused by uncontrolled recursion during ordered JSON JavaScript Object Notation parsing and serialization, allows remote unauthenticated attackers to submit deeply nested JSON documents. This can lead to a...

CVE-2026-105810

The TP-Link Tapo C320WS V2.0 is vulnerable to an authenticated stack-based buffer overflow within the local onboarding Wi-Fi configuration path. An authenticated attacker located on the adjacent network can submit a crafted request featuring an oversized encrypted password field to overwrite the ...

CVE-2026-105810 Authenticated Local Stack Overflow in TP-Link Tapo C320WS

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...

Exploit for CVE-2024-58299

Description This pull request addresses a security vulnerabil...

PT-2026-117651

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The OSDP Control Panel reply parser cp decode response in subsys/mgmt/osdp/src/osdp cp.c fails to properly validate the payload length for REPLY KEYPPAD and REPLY RAW reply types. An attacker...

EUVD-2025-26311

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote...

Qt resource management error vulnerability

Versions of Qt from 4.1.0 to 6.8.9 and from 6.9.0 to 6.11.2 contain a resource management vulnerability. This vulnerability stems from uncontrolled recursion in the SVG parser and renderer. Attackers can exploit this vulnerability by using specially crafted SVG files with deeply nested elements,...

Lode Vandevenne has a buffer error vulnerability

Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...

MGASA-2026-0515 Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Linux Distros Unpatched Vulnerability : CVE-2026-100354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an...

SUSE CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

lopdf has a stack overflow via deeply nested PDF objects

lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...