CVE-2026-21068

Stack-based buffer overflow in librilsem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code...

PT-2026-69396

Name of the Vulnerable Software and Affected Versions libril sem.so versions prior to SMR Aug-2026 Release 1 Description A stack-based buffer overflow exists in the libril sem.so library. This flaw allows privileged local attackers to execute arbitrary code. A stack-based buffer overflow occurs...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.7 (AXSA:2026-1507:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1507:08 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: gimp: Integer overflow in readRLEchannel CVE-2026-58384 Tenable has...

MiracleLinux 9 : libxml2-2.9.13-14.el9_8.2 (AXSA:2026-1496:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1496:06 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly fro...

Alibaba Cloud Linux 3 : 0243: vim (ALINUX3-SA-2026:0243)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0243 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55693: Vim is an open source,...

CVE-2026-55980: Stack-based Buffer Overflow

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

UBUNTU-CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

PT-2026-68140

Name of the Vulnerable Software and Affected Versions microtar affected versions not specified Description The mtar write file header and mtar write dir header functions in src/microtar.c contain a stack buffer overflow. This occurs because a caller-supplied entry name is copied into the 100-byte...

SUSE-SU-2026:23119-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

SUSE-SU-2026:23141-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

PT-2026-67742

Name of the Vulnerable Software and Affected Versions WLAN Firmware affected versions not specified Description Memory corruption occurs when processing Device Capability Extended attributes within certain NAN Neighbor Awareness Networking Service Discovery Frames that contain invalid length...

PT-2026-67851

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 4.0.1 Description A stack buffer overflow occurs when processing a SIP message containing a header name longer than 255 bytes. This happens when the routing script calls the sip to json function, which copies header...

CVE-2026-45538: Stack-based Buffer Overflow

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when siptojson is called in the routing script. Function siptojson modules/sipmsgops/sipmsgops.c copie...

MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-9.el8_10.1 (AXSA:2026-1442:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1442:02 advisory. gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer CVE-2026-59691 gstreamer: gstreamer: DTLS certificate...

Security update for rrdtool

This update for rrdtool fixes the following issue: CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

CVE-2026-6694

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:47179)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47179 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...