CWE-787: Out-of-bounds Write vulnerabilities

Progress MarkLogic Server versions 11.0.0 up to but not including 11.3.7 and 12.0.0 up to but not including 12.1.0 contain an out-of-bounds write vulnerability in language-processing functionality. This flaw allows a remote authenticated attacker to cause server instability or limited data modification. The vulnerability has a high severity with a CVSS score of 7.1. No explicit patch links are provided in the input data.

CVE-2026-21122 is a high-severity vulnerability involving an out-of-bounds write in the libsamsungtts.so component of Samsung Mobile Devices. This flaw exists in versions prior to the SMR Oct-2026 Release 1. It allows local attackers to execute arbitrary code on affected devices without requiring user interaction or elevated privileges.

CVE-2026-21116 is an out-of-bounds write vulnerability in the libsmkvextractor.so component of Samsung Mobile Devices. It affects versions prior to the SMR Oct-2026 Release 1. The flaw allows local attackers to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No known exploits are reported in the wild. No explicit patch or remediation details are provided in the available data.

CVE-2026-21115 is an out-of-bounds write vulnerability in the libcodec2-sec-flacdec.so component of Samsung Mobile Devices. It affects versions prior to the SMR Oct-2026 Release 1. The flaw allows local attackers to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity. A patch is available to address this issue. The vulnerability does not require user interaction and has no known exploits in the wild at this time.

CVE-2026-21114 is a high-severity vulnerability in Samsung Mobile Devices involving an out-of-bounds write in the libsmkvextractor.so component. This flaw exists in versions prior to the SMR Oct-2026 Release 1. It allows local attackers to execute arbitrary code on affected devices without requiring user interaction.

CVE-2026-108985 is a high severity vulnerability in the sahlberg libnfs library affecting versions 0 through 6.0.2. It involves an out-of-bounds write in the ZDR decoding functionality where the maxsize parameter supplied by the caller is not properly enforced. This flaw exists in functions libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array() within lib/libnfs-zdr.c. The vulnerability can lead to a denial of service due to an out-of-bounds write but does not impact confidentiality.

CVE-2026-103513 is a critical out-of-bounds read and write vulnerability in the Apache DataSketches C++ library's CPC sketch deserialization. It occurs when a crafted serialized CPC sketch is deserialized, allowing reading past the end of compressed data and writing outside an internal heap buffer due to lack of validation on decoded indices and header fields. This can corrupt heap memory, causing crashes and potentially enabling further exploitation. The issue affects versions from 2.0.0-incubating up to 5.2.0. Upgrading to version 5.3.0 resolves the vulnerability.

An out-of-bounds write vulnerability exists in the MariaDB server's CONNECT engine DOS table type in certain versions. This flaw allows an authenticated user with CONNECT engine access to write a null byte beyond a stack buffer boundary, potentially causing a crash or remote code execution. The issue affects multiple MariaDB versions starting from 10.6.1 up to but not including fixed versions such as 10.6.28 and others. The vulnerability has a high severity score of 8.5 and is addressed in specific patched versions.

CVE-2026-12109 is an out-of-bounds write vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It allows an attacker with administrative privileges and local management interface access to execute arbitrary code by exploiting an unbounded write to a fixed-size stack buffer.

CVE-2026-106431 is an off-by-one out-of-bounds write vulnerability in the BSON bulk document writer component of the MongoDB C Driver. The flaw occurs when a document ends exactly at a specific buffer boundary, causing a single zero byte to be written just beyond the allocated heap memory. This can result in adjacent memory corruption or process termination if an attacker controls the size of serialized documents via the BSON bulk-writer API. The vulnerability affects MongoDB C Driver versions from 0.5.0 up to but not including 1.30.13, and from 2.0.0 up to but not including 2.5.6. The CVSS 4.0 base score is 5.9, indicating medium severity. No known exploits are reported in the wild, and no official patch links are provided in the data.

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.

CVE-2026-14992 is a critical buffer overflow vulnerability (CWE-787) affecting IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. The flaw allows an out-of-bounds write, potentially leading to complete compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS v3.1 score of 9.8, indicating high severity with network attack vector, no privileges or user interaction required. No known exploits are reported in the wild. Patch status is not confirmed as no patch links or vendor advisory details are provided.

CVE-2026-14991 is a critical buffer overflow vulnerability in IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. The flaw is due to improper bounds checking, allowing a local user to overflow a buffer and potentially execute arbitrary code on the affected system.

CVE-2026-15784 is a high-severity vulnerability in IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. It involves an out-of-bounds write that could allow a remote attacker to execute arbitrary code without user interaction. The vulnerability has a CVSS 3.1 score of 8.1, indicating a significant risk to confidentiality, integrity, and availability. No information about patches or vendor advisories is provided, so the patch status is not confirmed.

CVE-2026-15762 is a critical vulnerability in IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. It involves an out-of-bounds write that could allow a remote attacker to execute arbitrary code without authentication or user interaction.

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.