CVE-2026-88388: Stack-based Buffer Overflow

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

PT-2026-97828

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue occurs when a crafted oversized firmware image is processed, leading to an EL3 stack overflow during VAB authentication. This can result i...

CVE-2026-58008: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

RHEL 10 : libxml2 (RHSA-2026:71586)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71586 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

SUSE SLES15 Security Update : podofo (SUSE-SU-2026:4311-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4311-1 advisory. - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-124432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124432 advisory. BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte...

PT-2026-104884

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2c smbus xfer emulated but that check runs too late for tracepoints and is skipped entirely when the...

PT-2026-97832

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description A stack-based buffer overflow occurs in EL3 due to unchecked HKDF key-size input. This allows for the exploitation of improperly configured or implemented memory...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-61811: Uncontrolled Recursion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...

CVE-2026-13465: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

PT-2026-97817

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description A stack-based buffer overflow exists in the EL3 Exception Level 3, the highest privilege level in ARMv8-A architecture during an FCS HKDF request. This flaw allows fo...

PT-2026-98001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb/client component where the stack-allocated cifs open info data is not zero-initialized. This can result in the structure containing random data, potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-97442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: fix invalid data access in ath11kdprxhundecapnwifi In certain cases, hardware might provide packets with a length greater than the maximum native...

EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

RHEL 9 : rrdtool (RHSA-2026:71600)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:71600 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

Linux Distros Unpatched Vulnerability : CVE-2026-59168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go...