CVE-2026-58008: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

PT-2026-97832

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description A stack-based buffer overflow occurs in EL3 due to unchecked HKDF key-size input. This allows for the exploitation of improperly configured or implemented memory...

EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

PT-2026-98300

Name of the Vulnerable Software and Affected Versions Espruino version 2v29 commit bffc6d0 Description A stack-based buffer overflow exists in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can provide JavaScript input that triggers an exception, leading to the...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

ROS-20260924-73-0035

The vulnerability of the iwlagnsendstakey function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-88388

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

Security update for freeipmi (important)

openSUSE security update: security update for freeipmi ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21883-1 Rating: important References: bsc1278719 bsc1278721 bsc1278722 bsc1278724 bsc1278726 bsc1278727 Cross-References: CVE-2026-85504...

RHEL 8 : libxml2 (RHSA-2026:71641)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71641 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

CVE-2026-88388: Stack-based Buffer Overflow

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

Espruino 2v29 (commit bffc6d0 ) is vulnerable to a stack-based buffer overflow within the JavaScript error stack-trace handling path on 64-bit builds . A remote attacker can provide JavaScript input that triggers an exception, leading to the execution of jslPrintTokenLineMarker(). This function i...

CVE-2026-13465: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

SUSE SLES15 Security Update : podofo (SUSE-SU-2026:4311-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4311-1 advisory. - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in...

RHEL 9 : libxml2 (RHSA-2026:71585)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71585 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

CVE-2026-96676

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

CVE-2026-96676

A stack-based buffer overflow vulnerability exists in the get_alias_name function of the uhttpd component within Fast FAC1900R 20190827_2.0.2 . This flaw can be exploited via a remote attack to cause a buffer overflow. An exploit is reported as publicly available and potentially usable in the wil...

CVE-2026-63276

A flaw was found in LibreOffice. When a user exports a document with crafted embedded fonts to PDF, a stack-based buffer overflow can occur during the conversion of CFF fonts to Type 1 fonts due to improper bounds checking. This issue can cause memory corruption, resulting in an application crash...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-11979 DESCRIPTION: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell functi...

CVE-2026-96257

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

CVE-2026-96257 Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copymsgelement of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...