BIT-THRIFT-2026-66837 Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Security update for fetchmail

This update for fetchmail fixes the following issue: CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:4605-1 Security update for fetchmail

This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055...

Security update for fetchmail

This update for fetchmail fixes the following issue: CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:4604-1 Security update for fetchmail

This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055...

CVE-2026-98205

A flaw was found in the Linux kernel's event device evdev subsystem. When processing device configuration requests with a smaller-than-expected data size, the kernel fails to initialize a temporary memory structure on the stack before copying user data into it. A local user can exploit this...

CLSA-2026-1791473629 pcre2: Fix of CVE-2026-103111

CVE-2026-103111: fix out-of-bounds write when growing the JIT stack for a single stack allocation larger than half the stack growth rate...

CLSA-2026-1791468812 pcre2: Fix of CVE-2026-103111

CVE-2026-103111: fix out-of-bounds write when growing the JIT stack for a single stack allocation larger than half the stack growth rate...

CLSA-2026-1791470029 opensc: Fix of CVE-2026-103531

CVE-2026-103531: stack buffer overflow in setcosconstructfci44 when type, security or proprietary file attributes exceed 64 bytes...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

EUVD-2026-95474

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CLEANSTART-2026-NO64330 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion

CVE-2026-56859 affects multiple packages. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. See references for individual vulnerability details...

CLEANSTART-2026-TL99619 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

CVE-2026-33818 affects multiple packages. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...

EUVD-2026-95332

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

SUSE CVE-2026-44031

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...