Out-of-bounds Write

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2025-70245

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode...

The vulnerability of the `bond_ethtool_get_ts_info()` function in the `drivers/net/bonding/bond_main.c` file of the Linux kernel’s network device driver module allows a hacker to induce a service failure.

The vulnerability of the bondethtoolgettsinfo function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Tenda A15 安全漏洞

The Tenda A15 is a WiFi extender produced by the Chinese company Tenda. Version 15.13.07.13 of the Tenda A15 contains a security vulnerability. This vulnerability stems from improper handling of the File parameter in the UploadCfg function located at /file/cgi-bin/UploadCfg. It may lead to a...

XnSoft Nconvert 安全漏洞

XnSoft Nconvert is a powerful command-line multi-platform image processing tool developed by XnSoft Corporation. It features over 80 commands. Version 7.230 of XnSoft Nconvert contains a security vulnerability caused by a stack buffer overflow issue when processing specially crafted .tiff files...

Google Chrome stack buffer overflow vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a stack buffer overflow vulnerability, and attackers can exploit this vulnerability to cause heap corruption...

xnu:net_fuzzer: Stack-buffer-overflow in strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=6416180201193472 Project: xnu Fuzzing Engine: honggfuzz Fuzz Target: netfuzzer Job Type: honggfuzzasanxnu Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0x78d83eed110c Crash State: strlcpy sosettcdbg sosetoptlock...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_text_process_ssa

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6167396904927232 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x758481a3a820...

DEBIAN-CVE-2026-4444

Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-4444: Stack-based Buffer Overflow

Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

Tenda A18 Pro 安全漏洞

The Tenda A18 Pro is a wireless signal extender produced by the Chinese company Tenda. Version 02.03.02.28 of the Tenda A18 Pro contains a security vulnerability, which stems from a stack buffer overflow in the setSchedWifi function found in the file/goform/openSchedWifi...

CVE-2026-3849: Out-of-bounds Write

Stack Buffer Overflow in wcHpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH Encrypted Client Hello support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client...

CVE-2026-0819: Stack-based Buffer Overflow

A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wcPKCS7BuildSignedAttributes, when adding custom signed attributes, the code passes an incorrect capacity value esd-signedAttribsCount to EncodeAttributes instead of the remaining available space...

CVE-2026-22319 Stack-Based Buffer Overflow in File Install Parameter Handling

A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack...

gdal:ogr_miramon_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6569888155238400 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrmiramonfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0xf6af2c5...

vlc:vlc-demux-dec-libfuzzer-asf: Stack-buffer-overflow in SetupOutputFormat

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4583863266639872 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-asf Job Type: aflasanvlc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x787c1aeed04...

CVE-2026-0849: Buffer Copy without Checking Size of Input

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-1362)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 version 1.10CNB05 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter pskValue in the file/goform/form2Wl5BasicSetup.cgi, which may lead to a stack buffer...