101914 matches found
ROOT-OS-ALPINE-315-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root
Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.15. Multiple fixed versions available...
BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...
Multiple vulnerabilities in BUFFALO Wi-Fi Products
Overview The web configuration user interfaces of Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2026-86530 Stack-based buffer overflow CWE-121 - CVE-2026-95104 Veeti Punnonen reported these vulnerabilities to JPCERT/CC...
cups-filters:fuzz_cupsfilters_foomatic_jcl: Stack-buffer-overflow in write_merged_jcl_options
Project: https://github.com/OpenPrinting/cups-filters.git Detailed Report: https://oss-fuzz.com/testcase?key=6199945737338880 Project: cups-filters Fuzzing Engine: libFuzzer Fuzz Target: fuzzcupsfiltersfoomaticjcl Job Type: libfuzzerasancups-filters Platform Id: linux Crash Type:...
CVE-2026-101354
A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...
CVE-2026-97554
A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...
CVE-2026-101354 FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow
A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...
CVE-2026-101354 FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow
A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...
EUVD-2026-88600
A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...
CVE-2026-101354
A stack-based buffer overflow vulnerability exists in FAST FAC1203R version 20200116_2.0.4 . The flaw is located within the _tWlanTask function of the MmtAtePrase Parser component. An attacker with access to the local network can perform a manipulation to trigger this overflow. While an exploit h...
CLEANSTART-2026-PD89526 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification
Security vulnerability affects the apache-superset package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification...
CLEANSTART-2026-TZ09110 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
CVE-2026-56859 affects multiple packages. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. See references for individual vulnerability details...
CLEANSTART-2026-UC28835 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
CVE-2026-33818 affects multiple packages. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CVE-2026-77177
Open GenAI Stack aka ogx-ai 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection with Jinja2 template syntax can be used to achieve server-side expression evaluation without sanitization...
CVE-2026-94954
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...
PT-2026-109054
Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the...
CVE-2026-94953
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...
CVE-2026-7192: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...
Important: libheif
Issue Overview: Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hh47-fhqr-cj2r CVE-2026-84450 Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an...
EUVD-2026-89331
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...