EUVD-2024-22512

Malicious code in bioql PyPI...

RLSA-2025:7478 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: Stack buffer overflow from 'orftokenendianconvert' CVE-2025-30472 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

PT-2025-48839

Уязвимость функции sub 4F55C микропрограммного обеспечения маршрутизатора Tenda AX1803 связана с переполнением буфера в стеке при обработке параметра wanMTU. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

CVE-2025-59149: Stack-based Buffer Overflow

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In version 8.0.0, rules using keyword ldap.responses.attributetype which is long with transforms can lead to a stack buffer overflow during Suricata startup or duri...

Delta Electronics CNCSoft-G2 Stack Buffer Overflow Vulnerability (CNVD-2025-22945)

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a stack buffer overflow vulnerability that originates from improperly restricted memory buffer operations and can be exploited by an attacker to...

Tenda AC18 安全漏洞

Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version 15.03.05.19, which originates from an incorrect operation of the parameter enable in the file /goform/saveAutoQos resulting in a stack buffer overflow that can be remotely exploited...

The vulnerability in the `security/keys/trusted-keys/trusted_dcp.c` component of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability in the security/keys/trusted-keys/trusteddcp.c component of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows attackers to execute arbitrary code.

The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a stack buffer overflow vulnerability that originates from improperly restricted memory buffer operations and can be exploited by an attacker to...

PT-2025-48841

Уязвимость функции fromSetWifiGusetBasic микропрограммного обеспечения Wi-Fi маршрутизаторов Tenda AX3 связана с переполнением буфера в стеке при обработке параметра shareSpeed. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2025-48840

Уязвимость функции saveParentControlInfo микропрограммного обеспечения Wi-Fi маршрутизаторов Tenda AX3 связана с переполнением буфера в стеке при обработке параметра deviceId. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Artifex Ghostscript 安全漏洞

Artifex Ghostscript is the United States Artifex company's set of Adobe-based, PostScript and portable document format page description language and compiled into the free software. Artifex Ghostscript pdfwritecmap function has a stack buffer overflow vulnerability, there is no detailed...

CVE-2025-59798

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfwritecmap in devices/vector/gdevpdtw.c...

The vulnerability of the DVP File Parser component of the Delta Electronics ISPSoft programming software allows a hacker to execute arbitrary code.

The vulnerability of the DVP File Parser component of the Delta Electronics ISPSoft programming software relates to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ashlar-Vellum Graphite Stack Buffer Overflow Vulnerability

Ashlar-Vellum Graphite is a CAD modeling software from Ashlar-Vellum. Ashlar-Vellum Graphite suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

The vulnerability of the intellectual driver for HP Universal Print, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of the HP Universal Print intelligent driver is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

BMC Control-M Stack Buffer Overflow Vulnerability (CNVD-2025-22539)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. BMC Control-M suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

curl: Stack Buffer Overflow in cURL Cookie Parsing Leads to RCE

Summary I discovered a critical stack-based buffer overflow vulnerability in cURL's cookie parsing mechanism that can lead to remote code execution. The vulnerability occurs when processing maliciously crafted HTTP cookies, affecting all applications that use libcurl for HTTP requests. Descriptio...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking the vlenb load size, which could lead to a stack buffer overflow...

Mercury KM08-708H GiGA WiFi Wave2 安全漏洞

Mercury KM08-708H GiGA WiFi Wave2 is a wireless router from Mercury China. A security vulnerability exists in Mercury KM08-708H GiGA WiFi Wave2 version 1.1.14, which originates from a stack buffer overflow in the HTTP Header Handler component's operation on the parameter Host, which could lead to...