CVE-2022-35260

curl: .netrc parser out-of-bounds access

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Apple Haxx Netapp and 1 more

Products

Macos Curl Clustered Data Ontap and 9 more

CVE-2026-107705

Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the libpoppler, libpoppler-glib or C++ API to overflow the K1 and E buffers, crashing the process or corrupting memory.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Freedesktop

Products

Poppler

CVE-2026-87676

Stack Buffer Overflow in Brocade Fabric OS Certificate Parser Causes DoS

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Broadcom Brocade

Products

Fabric Operating System Fabric Os

CVE-2026-87684

Stack-Based Buffer Overflow in Brocade Fabric OS SNMP Daemon

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Broadcom Brocade

Products

Fabric Operating System Fabric Os

CVE-2026-109157

TRENDnet TEW-432BRP formTcpipSetup stack-based overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Trendnet

Products

Tew-432brp Tew-432brp Firmware

CVE-2026-109109

Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Wavlink

Products

Wl-wn530be1-a

CVE-2022-2078

kernel: buffer overflow in nft_set_desc_concat_parse()

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Linux Redhat

Products

Debian Linux Linux Kernel Enterprise Linux and 3 more

CVE-2021-32292

json-c: stack-buffer-overflow in parseit() in json_parse.c

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Json-c Netapp

Products

Json-c Active Iq Unified Manager

CVE-2020-29573

glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of "Fixed for glibc 2.33" in the 26649 reference.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed

Vendors

Gnu Netapp Redhat

Products

Glibc Cloud Backup Solidfire Baseboard Management Controller and 6 more

CVE-2020-19188

ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Invisible-island Netapp

Products

Ncurses Active Iq Unified Manager

CVE-2020-13434

sqlite: integer overflow in sqlite3_str_vappendf function in printf.c

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Canonical Debian and 5 more

Products

Icloud Ipados Iphone Os and 13 more

CVE-2020-8285

curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

CVSS 3.1 · 7.5 High EPSS 9.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 7 more

Products

Mac Os X Macos Debian Linux and 29 more

CVE-2020-10029

glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 15 more

CVE-2019-1010022

glibc: stack guard protection bypass

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Gnu

Products

Glibc

CVE-2019-12900

bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS 3.1 · 9.8 Critical EPSS 8.0% KEV · Not listed

Vendors

Bzip Canonical Debian and 4 more

Products

Bzip2 Ubuntu Linux Debian Linux and 6 more

CVE-2017-9048

libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.

CVSS 3.1 · 7.5 High EPSS 4.8% KEV · Not listed

Vendors

Redhat Xmlsoft

Products

Jboss Core Services Libxml2

CVE-2026-88166

Microsoft Office SharePoint Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2026-70571

Microsoft Exchange Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Exchange Server 2016 Exchange Server 2019 Exchange Server Se

CVE-2026-105732

SysInternals Elevation of Privilege Vulnerability

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Sysinternals Suite

CVE-2026-65148

Stack-based Buffer Overflow in NVIDIA DALI Leading to Code Execution and Data Compromise

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Nvidia

Products

Dali