Linux Distros Unpatched Vulnerability : CVE-2026-91090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This...

CVE-2026-86358: Stack-based Buffer Overflow

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

SUSE CVE-2026-91752

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...

CVE-2026-76869 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboottimerset.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the reboot_timer_set.cgi endpoint, caused by improper sscanf token parsing . An attacker with authenticated access can submit crafted input to corrupt stack memory, potentially leading to code execution or service disrup...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi endpoint, caused by an unsized sprintf call when processing form values. An attacker with low privileges can submit crafted input to this CGI to overflow the stack buffer, potentially ach...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow allows remote code execution as root on affected installations of the Linux Bluetooth protocol stack. The flaw resides in the handling of stream endpoints , where user-supplied data is copied to a fixed-length stack-based buffer without proper length validat...

CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

CVE-2026-91826

A flaw was found in rLottie, an open-source library for rendering vector animations. An attacker could exploit a stack-based buffer overflow vulnerability by providing a specially crafted vector animation. This could lead to memory corruption, potentially causing a denial of service or other...

CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

UBUNTU-CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

CVE-2026-91826

Samsung rLottie , an open-source library for rendering vector animations, is affected by a stack-based buffer overflow that triggers when rendering a specially crafted vector animation , leading to memory corruption . The vulnerable version is identified by commit 480a2ad0c5d2e45458c545b8213279e9...

EUVD-2026-78331

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

UBUNTU-CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...