CVE-2026-102278: Uncontrolled Resource Consumption

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102276: Uncontrolled Resource Consumption

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

Important: qt5-qtbase

Issue Overview: Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only. CVE-2026-11573 QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-99815

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi products affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. In this case, a non-authenticated...

Atlassian Confluence 8.9.x < 9.2.22 / 9.5.x < 10.2.14 (CONFSERVER-104406)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104406 advisory. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas help...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The library function gdcm::System::EncodeBytes, defined in Source/Common/gdcmSystem.cxx, is vulnerable to a stack-based buffer...

RHEL 9 : rrdtool (RHSA-2026:72278)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72278 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

RHEL 9 : rrdtool (RHSA-2026:72277)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72277 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

PT-2026-99763

Name of the Vulnerable Software and Affected Versions Eyeplus version 57.0.0.0308 Description A remote stack-based buffer overflow exists within the p2pcam HTTP Parser component. This issue occurs when an unknown function fails to properly handle input, allowing a remote attacker to trigger the...

PT-2026-99768

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions prior to 7.22 Description A stack-based buffer overflow exists in the MQTT Broker component, specifically within the fn function located in the tutorials/mqtt/mqtt-server/main.c file. This issue allows a remote attack...

CVE-2026-101003: Stack-based Buffer Overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

RUSTSEC-2026-0311 Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

CVE-2026-100745

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

EUVD-2026-87833

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

CVE-2026-100745 Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

CVE-2026-100745 Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

CVE-2026-100745

A stack-based buffer overflow vulnerability exists in the Edimax BR-6428nC (version 1.16) within the Wireless Wizard Handler component. The flaw is located in an unknown function of the /goform/formWizSurvey file, where manipulating the interface1/interface2 argument can trigger the overflow. Rem...

PT-2026-99699

Name of the Vulnerable Software and Affected Versions FAST FAC1200R version 5.0 20201119 1.0.2 Description A stack-based buffer overflow occurs in the MmtAtePrase Parser component via the MmtAtePrase function. This flaw allows for remote exploitation. Recommendations At the moment, there is no...