CVE-2019-9766

CVE-2019-9766 Exploiting the buffer overflow vulnerability in Free MP3 CD Ripper version 2.6, by constructing a specially crafted MP3 file, when the attacker uses the player to play the audio file, the audio file bait exploits the buffer overflow vulnerability to execute arbitrary code...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

CVE-2024-20154

CVE-2024-20154: MediaTek MT6769ベースバンドにおけるNB-IoT SIB1-NBスタックオーバーフロー 分類: CWE-121 — スタックベースのバッファオーバーフロー 深刻度: Critical MediaTek セキュリティ速報 · 8.8 High、攻撃ベクター: 隣接 CISA-ADP 種類: リモートコード実行 — ユーザー操作不要、事前関連付け不要 開示: MediaTek セキュリティ速報、2025年1月6日 https://corp.mediatek.com/product-security-bulletin/January-2025...

PT-2026-89278

Nintendo has warned Switch owners about a security vulnerability involving QR codes displayed by the console. The issue, CVE-2026-82079, affects QR codes generated by the Switch when using the Album feature to share screenshots and videos with smartphones. The same vulnerability can also be...

EUVD-2026-74634

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21093

A stack-based buffer overflow in the PROCA trustlet on Samsung mobile devices allows a local privileged attacker to write out-of-bounds memory, resulting in a high impact to vulnerable-system confidentiality (CVSS 4.0 base score 5.6, MEDIUM ). The attack requires local access, high privileges, an...

CVE-2026-85384

A stack-based buffer overflow exists in the httpd component of the TP-Link RE210 AC750 , caused by improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger...

CVE-2026-81953

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-73701

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73092

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

Windows Device Association Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

Windows NTFS Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

CVE-2026-86514

vgmstream (up to revision r2117) contains a stack-based buffer overflow in the sscanf function within src/meta/txth.c, part of the txth-txtp component. The flaw can be triggered remotely without authentication, though user interaction is required (e.g., opening a crafted file). CVSS 3.1 rates it ...

CVE-2026-86514 vgmstream txth-txtp txth.c sscanf stack-based overflow

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-86509

A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...

PT-2026-87893

Something to consider when ranking vulnerabilities CVE-2026-72982 has been public for a couple of days, so why aren’t attackers already using it to pop shells on DCs? Everyone has LLMs now, right? Finding a bug and producing a crash is not the same as building reliable RCE. https://t.co/HCBIKjO6N...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - バッファオーバーフロー調査 目的 教育目的で管理されたラボ環境における、古典的なスタックベースのバッファオーバーフロー脆弱性の研究。 このプロジェクトの目的は、以下をより深く理解することでした： アプリケーションのファジング クラッシュ解析 EIP制御 バッドキャラクタの特定 メモリ破損 シェルコードの実行フロー 基本的なエクスプロイト開発手法 環境 Windows 10 仮想マシン Sync Breeze Enterprise 10.0.28 Immunity Debugger Mona.p...

CVE-2026-86318

A stack-based buffer overflow vulnerability exists in the java-json-tools json-patch library (versions up to 1.13 ), specifically in the JsonMergePatch.fromJson function within JsonMergePatchDeserializer.java . The flaw can be exploited remotely with no authentication required and low complexity,...

CVE-2026-86318 java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...