CLEANSTART-2026-PO03838 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion

CVE-2026-56859 affects multiple packages. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. See references for individual vulnerability details...

CLEANSTART-2026-GC49284 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

CVE-2026-33818 affects multiple packages. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...

EulerOS 2.0 SP15 : busybox (EulerOS-SA-2026-3900)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a...

PT-2026-107945

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...

PT-2026-107780

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

PT-2026-107775

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

PT-2026-107769

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

EulerOS 2.0 SP15 : busybox (EulerOS-SA-2026-3966)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying ...

Linux Distros Unpatched Vulnerability : CVE-2026-98372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset ...

PT-2026-107776

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

PT-2026-108039

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av encryption init info free in libavutil/encryption info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov read pssh. Attackers can supply a crafted MP4 file with tens of thousands of smal...

Elasticsearch-Exploit-CVE-2023-31419

Elasticsearch StackOverflow भेद्यता Elasticsearch में एक दोष पाया गया, जो search API को प्रभावित करता है, जिसमें एक विशेष रूप से तैयार क्वेरी स्ट्रिंग स्टैक ओवरफ्लो और अंततः सेवा अस्वीकार का कारण बन सकती है। प्रभावित संस्करण: Elasticsearch संस्करण 7.0.0 से 7.17.12 और 8.0.0 से 8.9.0 समाधान और शमन:...

CVE-2026-107216

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216

The Excelize Go library (versions 2.8.1 to 2.11.0 ) contains a vulnerability where ANCHORARRAY recursively calls the CalcCellValue function. This causes mutually-referencing dynamic-array formulas to recurse unboundedly because each recursive hop creates a fresh calculation context, bypassing in-...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-106572

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-मूक-गेटवे-जोखिम हमलावरों को बिना क्रैक किए गए पासवर्ड, उपयोगकर्ता इंटरैक्शन, या आपके नेटवर्क में पैर जमाए बिना दुर्भावनापूर्ण कोड चलाने देना। यही है CVE-2025-27480 देर रात है, आप Red Bull पी रहे हैं, हम सब वहाँ रहे हैं। आप एक प्रोडक्शन समस्या का निवारण कर रहे हैं और बिस्तर पर वापस...

MGASA-2026-0470 Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...