libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

PT-2026-125466

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function sub 402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT LENGTH results in stack-based buffer overflow. Remot...

PT-2026-125464

Name of the Vulnerable Software and Affected Versions go-jose versions prior to 4.1.5 Description Parsing attacker-controlled JSON allows deeply nested arrays or objects to exceed the stack limit of the Go language. This results in a stack overflow, which crashes the application and enables a...

UBUNTU-CVE-2026-115384

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions ...

PT-2026-125472

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl BMP Image::load bmp that allows attackers to corrupt stack memory by supplying an oversized BMP colors used field. Attackers can craft BMP or ICO files with colors used above 256 to overflow the 768-byte colormap array,...

CVE-2026-104593

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename in src/libmsc/sgsiface.c. This allows a remote attacker to cause a denial of service...

EUVD-2026-110099

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename in src/libmsc/sgsiface.c. This allows a remote attacker to cause a denial of service...

CVE-2026-104593

The software osmo-msc through version 1.15.0 is vulnerable to a stack-based buffer overflow in the decode_mme_name() function located in src/libmsc/sgs_iface.c. A remote attacker can exploit this vulnerability to cause a denial of service . No specific remediation steps or exploit details are pro...

PT-2026-125087

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode mme name in src/libmsc/sgs iface.c. This allows a remote attacker to cause a denial of service...

UBUNTU-CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service...

ALSA-2026:89753 Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

ALSA-2026:89905 Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

PT-2026-123184

V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

UBUNTU-CVE-2026-115393

Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate that objects belong to the Store's Engine. Embedders mixing objects between Engines via Instance::new,...

PT-2026-123414

The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers gen stable iid in subsys/net/ip/ipv6.c and RFC 8981 temporary interface identifiers gen temporary iid in subsys/net/ip/ipv6 pe.c with sys rand get. That API is documented as not cryptographicall...

PT-2026-125490

Name of the Vulnerable Software and Affected Versions Speex libspeex versions prior to 1.2.2 Description An out-of-bounds write occurs in the speex bits read whole bytes function within libspeex/bits.c due to improper handling of length truncation for non-owned SpeexBits buffers. An attacker can...

PT-2026-123450

Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. Additionally Routinator runs into a stack overflow and exits when a payload item with to...

CentOS Linux 8 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793029519)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793029519 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow ...

RHEL 9 : freeipmi (RHSA-2026:89753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89753 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...