ROS-20260907-73-0048

The vulnerability in Erlang is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-86318: Stack-based Buffer Overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

UBUNTU-CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

PT-2026-86832

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

CVE-2026-20509: Stack-based Buffer Overflow

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...

LOYTEC L-IP BACnet/IP Routers Stack-based Buffer Overflow (CVE-2026-55728)

The 'cmdipaddrconflict' subcommand of the SUID-root '/usr/bin/ltsudo' utility on a LOYTEC L-IP BACnet/IP router copies a user-supplied network interface name into a fixed 20-byte stack buffer using 'strcpy' without bounds checking. A 'superadmin'-group attacker can supply an overly long interface...

Malicious code in easy-boolean-mock-proxy-stack (npm)

The package easy-boolean-mock-proxy-stack was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in doc-plugin-rush-stack (npm)

Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

SUSE-SU-2026:23628-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

SUSE-SU-2026:23495-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

OPENSUSE-SU-2026:21765-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

Linux Distros Unpatched Vulnerability : CVE-2026-57165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Linux Distros Unpatched Vulnerability : CVE-2026-57166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-035846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035846 advisory. A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an...

Linux Distros Unpatched Vulnerability : CVE-2026-57163

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backen...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073361 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxf...

Linux Distros Unpatched Vulnerability : CVE-2026-57162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media...