CWE-121: Stack-based Buffer Overflow vulnerabilities

CVE-2026-16911 is a high-severity stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw allows a remote authenticated attacker to execute arbitrary code on the affected systems without user interaction.

CVE-2026-16885 is a critical stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-16877 is a high-severity stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote authenticated attacker to execute arbitrary code on the affected systems without user interaction.

CVE-2026-16872 is a critical stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-18871 is a stack-based buffer overflow vulnerability in IBM PowerVM Hypervisor firmware versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. It occurs during host firmware configuration parsing when an attacker with authenticated service-level access writes specially crafted configuration data. This can cause the host firmware boot stack to crash, potentially leading to memory corruption during system initialization. The impact affects system integrity and availability.

CVE-2026-16687 is a critical stack-based buffer overflow vulnerability in the ASMI web interface of IBM Power Systems Firmware. It affects multiple firmware versions including FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. An unauthenticated attacker with network access can send a malformed request to the FSP, leading to arbitrary code execution and full control over the managed system. This results in a complete compromise of confidentiality, integrity, and availability.

A stack-based buffer overflow vulnerability (CWE-121) exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. This flaw affects the FSP management network protocol and allows an attacker with authenticated HMC administrator access to execute arbitrary code on the service processor. Successful exploitation can lead to full control over the managed system, impacting confidentiality, integrity, and availability.

A stack-based buffer overflow vulnerability exists in IBM Power Systems Firmware versions FW1120.00 and FW1110.00 through FW1110.30. This flaw resides in the interface between the Baseboard Management Controller (BMC) and the host system. An attacker with service access to the BMC can exploit this vulnerability by sending a specially crafted command, resulting in arbitrary code execution on the host system. Successful exploitation grants full control over the host and all hosted partitions, impacting confidentiality, integrity, and availability.

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

A stack-based buffer overflow vulnerability exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC). This flaw allows an attacker with service-level access to the BMC/FSP to supply specially crafted configuration data that compromises the host firmware boot stage and all subsequent code execution, impacting confidentiality, integrity, and availability of the managed system.

A stack-based buffer overflow vulnerability (CWE-121) exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. The flaw occurs in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, potentially leading to arbitrary code execution on the host system. This can impact confidentiality, integrity, and availability of the affected system.

CVE-2026-75142 is a stack-based buffer overflow vulnerability in FFmpeg's MPEG-PS muxer component. It occurs when muxing input containing more streams than the fixed-size stack buffer can handle, leading to an overflow. This vulnerability affects FFmpeg versions before commit 9d786e4. The flaw can be triggered by crafted inputs with an excessive number of streams during MPEG-PS muxing.

CVE-2026-45798 is a high-severity stack-based buffer overflow vulnerability in Wazuh versions from 4.5.0 up to but not including 4.14.6, and from 5.0.0-beta1 up to but not including 5.0.0-beta2. The flaw exists in the compare_wazuh_versions() function, which improperly handles an attacker-controlled version string during anonymous TLS enrollment via wazuh-authd on TCP port 1515. This can lead to a remote denial of service by causing out-of-bounds reads and writes on the stack. The issue is fixed in versions 4.14.6 and 5.0.0-beta2.

A stack-based buffer overflow vulnerability exists in the ISO-2022 encoding module of FreeBSD's iconv(3) implementation. The module uses a fixed 6-byte stack buffer for intermediate character output, but some ISO-2022 variants require up to 10 bytes per character. This mismatch can cause a buffer overflow of up to four bytes when converting untrusted input using affected encoding modules. The vulnerability affects specific FreeBSD release versions.

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, and is reached only when a user opens the setup dialog for such a data source and initiates a file or folder selection. Depending on build configuration, the result may range from abnormal process termination to, under certain conditions, execution of unintended code in the context of the user running the dialog.

IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.