Unity Linux 20.1070e Security Update: redis (UTSA-2025-906166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-906166 advisory. Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987246 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 powerpc/32: Fix...

Unity Linux 20.1070e Security Update: yasm (UTSA-2025-680595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680595 advisory. yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who...

Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow

Summary IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...

CVE-2025-11328

A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-11328 Tenda AC18 SetDDNSCfg stack-based overflow

A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-11328

CVE-2025-11328 affects Tenda AC18 (firmware 15.03.05.19(6318)). The flaw is a stack-based buffer overflow in /goform/SetDDNSCfg caused by improper validation of the ddnsEn parameter, enabling remote, unauthenticated code execution or crash. Multiple sources corroborate the vulnerability and descr...

CVE-2025-11326

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11327 Tenda AC18 SetUpnpCfg stack-based overflow

A security vulnerability has been detected in Tenda AC18 15.03.05.196318. This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2025-32520

A security vulnerability has been detected in Tenda AC18 15.03.05.196318. This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-11327 Tenda AC18 SetUpnpCfg stack-based overflow

A security vulnerability has been detected in Tenda AC18 15.03.05.196318. This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-11326 Tenda AC18 WifiMacFilterSet stack-based overflow

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11326 Tenda AC18 WifiMacFilterSet stack-based overflow

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11326

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...

CVE-2025-11326

CVE-2025-11326 affects Tenda AC18 (version 15.03.05.19(6318)). The vulnerability resides in the wifi_chkHz handling of the /goform/WifiMacFilterSet file, where input length validation can cause a stack-based buffer overflow. This can be exploited remotely, and multiple sources note that an exploi...

EUVD-2025-32495

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available t...

CVE-2025-11325

A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-11325 Tenda AC18 fast_setting_pppoe_set stack-based overflow

A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-11325

CVE-2025-11325 affects Tenda AC18 routers (firmware around 15.03.05.19(6318)). The vulnerability is a stack-based overflow in the /goform/fast_setting_pppoe_set handler triggered by manipulating the Username parameter. It is remotely exploitable, with public exploit code available. Impact include...