Base de CVEs

CVE-2024-51315 Crítica · 9.8 CWE-121 20/07/2026

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964…

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName

CVE-2024-51314 Crítica · 9.8 CWE-121 20/07/2026

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0…

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg.

CVE-2024-51312 Crítica · 9.8 CWE-121 20/07/2026

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0…

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg.

CVE-2024-51313 Crítica · 9.8 CWE-121 20/07/2026

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38…

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.

CVE-2024-51311 Crítica · 9.8 CWE-121 20/07/2026

The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC…

The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList.

CVE-2026-48389 Alta · 7.8 CWE-121 20/07/2026

DNG SDK | Stack-based Buffer Overflow (CWE-121)

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-16277 Média · 6.5 CWE-121 20/07/2026

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this flaw to crash the rpcinfo client, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVE-2026-52584 Alta · 7.1 CWE-121 17/07/2026

Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to…

Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function

CVE-2021-27137 Alta · 8.1 KEV Alta · 55 CWE-121 16/07/2026

DD-WRT Stack-Based Buffer Overflow Vulnerability

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP (which is off by default, and only listens on internal interfaces by default). This occurs in ssdp_msearch (reachable by an M-SEARCH request).

CVE-2026-56455 Alta · 7.5 CWE-121 16/07/2026

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.

CVE-2026-48863 Alta · 7.5 CWE-121 15/07/2026

Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.

CVE-2026-62349 Alta · 8.3 CWE-121 15/07/2026

TDengine: Off-by-One Buffer Overflow

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for only one byte before processing SQL string escape sequences \%, \_, or \x, allowing a one-byte out-of-bounds write to the stack buffer tmpTokenBuf that can cause denial of service and potentially remote code execution. This issue is fixed in version 3.4.1.14.

CVE-2026-51807 Crítica · 9.8 CWE-121 14/07/2026

Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in…

Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) caused by missing bounds validation before coding-pass lengths are written to j2k_codeblock::pass_length[128]. A crafted JPEG 2000 codestream containing malformed PPM packet headers can trigger a heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in source/core/coding/coding_units.cpp due to missing bounds validation for the j2k_codeblock::pass_length[128] array which can lead to heap corruption and process termination.

CVE-2026-47971 Alta · 7.8 CWE-121 14/07/2026

Media Encoder | Stack-based Buffer Overflow (CWE-121)

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-50527 Alta · 7.5 CWE-121 14/07/2026

.NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-47477 Alta · 7.5 CWE-121 14/07/2026

Stack-based Buffer Overflow em NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

CVE-2026-62655 Média · 5.7 CWE-121 14/07/2026

A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.

CVE-2026-57091 Alta · 7.8 CWE-121 14/07/2026

Windows File History Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVE-2026-56642 Alta · 8.8 CWE-121 14/07/2026

Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.

CVE-2026-55141 Alta · 7.8 CWE-121 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55134 Alta · 7.8 CWE-121 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55055 Alta · 7.8 CWE-121 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55038 Alta · 7.8 CWE-121 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-50501 Alta · 7.8 CWE-121 14/07/2026

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

CVE-2026-50412 Alta · 7.8 CWE-121 14/07/2026

Windows NTFS Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.