101892 matches found
SUSE CVE-2026-103226
A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...
SUSE CVE-2026-103531
A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...
SUSE-SU-2026:4411-1 Security update for python
This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15806:...
Security update for python
This update for python fixes the following issues: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15806:...
CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...
CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...
CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...
EUVD-2026-90882
Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
SUSE-SU-2026:23989-1 Security update for jline3
This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public INPUTRECORD.memmove JNI Method Windows GHSA-6r3w-6jpj-x5w6 + Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions...
kernel: netfilter: conntrack: remove sprintf usage
A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...
CLEANSTART-2025-DZ77580 Stack buffer overflow vulnerability in gitea 1
Security vulnerability affects the gitea package. Stack buffer overflow vulnerability in gitea 1...
CLEANSTART-2024-UC94514 Stack buffer overflow in Printing in Google Chrome prior to 92
Security vulnerability affects the chromium package. Stack buffer overflow in Printing in Google Chrome prior to 92...
CLEANSTART-2024-GU69796 Stack buffer overflow in ANGLE in Google Chrome prior to 93
Security vulnerability affects the chromium package. Stack buffer overflow in ANGLE in Google Chrome prior to 93...
CLEANSTART-2025-PP73466 Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability
Security vulnerability affects the exim package. Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability...
CLEANSTART-2023-FC29404 There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj
Security vulnerability affects the faad2 package. There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj...
CLEANSTART-2023-NX33321 There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj
Security vulnerability affects the faad2 package. There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj...
CLEANSTART-2023-AL81588 There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj
Security vulnerability affects the faad2 package. There is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj...
CVE-2026-103531
A flaw was found in OpenSC. A stack-based buffer overflow vulnerability exists in the SetCOS smart card driver during the handling of file control information in the setcosconstructfci44 function. By supplying manipulated card attributes, an attacker could trigger memory corruption, potentially...
thrift: thrift: Denial of Service via stack-based buffer overflow in THeaderProtocol
A flaw was found in Apache Thrift. An incorrect bitwise integer shift in the C++ THeaderProtocol implementation can cause a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, resulting in a Denial of Service DoS...