CVE-2026-87676: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

PT-2026-108304

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6.2 Description The MaybeFlipBitmap function uses GetPropertyItem to read the PropertyTagOrientation size via GDI+ into a fixed 64-byte buffer on the stack. An attacker can trigger a stack-based buffer overflow b...

CVE-2026-84035: Stack-based Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

ALSA-2026:79281 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-4025)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check...

CVE-2026-107678: Uncontrolled Recursion

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

EulerOS 2.0 SP15 : radvd (EulerOS-SA-2026-4014)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

Oracle Linux 10 : vim (ELSA-2026-75769)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75769 advisory. - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator -...

PT-2026-108272

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on t...

CVE-2026-87683: Stack-based Buffer Overflow

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

CVE-2026-87665: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

CVE-2026-87684: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

PT-2026-108039

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0.3 Description A stack exhaustion issue exists in the av encryption init info free function within libavutil/encryption info.c. This occurs because the function recursively frees AVEncryptionInitInfo linked lists...

CVE-2026-71482

stargz-snapshotter estargz v0.10.0 through v0.18.2: getSource in estargz.go follows hardlinks recursively without tracking visited entries, so an eStargz layer with cyclic hardlinks causes unbounded recursion and a stack overflow denial of service. Fixed in v0.19.0...

PT-2026-109278

Name of the Vulnerable Software and Affected Versions OWASP Coraza WAF versions 3.0.0 through 3.8.0 Description An unauthenticated attacker can cause the hosting process to terminate with an unrecoverable fatal stack overflow. This occurs because the readJSON function in...

EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-3991)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

MiracleLinux 8 : glibc-2.28-251.el8_10.43 (AXSA:2026-1996:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1996:12 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-67...

CVE-2026-44036: Uncontrolled Recursion

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...

PT-2026-107945

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK version 3.7.0 Description Uncontrolled mutual recursion between the parseDataSet and parseSequence functions in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc can lead to a denial of service. An attacker can trigger stack...

RHEL 9 : libxml2 (RHSA-2026:79118)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79118 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...