CWE-120: Buffer Overflow vulnerabilities

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper size checking during buffer copy operations. It has a high severity with a CVSS score of 8.1. No patch or remediation details are provided in the available data.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper handling of input size during buffer copy operations.

A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using remote server profiles can overflow stack buffers causing a crash of the weblinker daemon.

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.

CVE-2026-81433 is a high-severity stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd). It allows an unauthenticated attacker with adjacent network access to execute arbitrary code or cause a denial of service by crashing the process via a specially crafted DHCP packet. Fixed versions are available.

IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDECL files in lib/resdata/rd_kw_grdecl.cpp and lib/resdata/rd_grid.cpp. Malformed COORD, ZCORN, CORSNUM, ACTNUM, or MAPAXES data can reach rd_grid_alloc_GRDECL_kw__ with inconsistent lengths, while unbounded floating-point conversion can exceed the intended parser buffer. In a network service that accepts untrusted GRDECL files, these conditions can cause a classic buffer overflow, out-of-bounds reads, invalid array access, NULL pointer dereference, memory corruption, or service termination. This issue is fixed in version 6.2.9.

Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows  attackers  to stop Windows.

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino String object. By passing values near the extremes of the float or double range to `String::concat(float)`, `String::concat(double)`, `String::operator+=()`, or the `+` operator with a float/double operand, `dtostrf()` writes beyond the fixed-size stack buffer, causing memory corruption and denial of service. Under specific conditions, this could enable arbitrary code execution on AVR-based Arduino boards. The fix is included starting from the `1.8.8 `release.

CVE-2026-42808 is a classic buffer overflow vulnerability in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function coines_read_stream_sensor_data() does not validate the size of the caller-provided buffer and copies data from an internal streaming ring buffer without boundary checks. This flaw allows a malicious or compromised hardware board connected via USB or BLE to cause a heap or stack-based buffer overflow on the host system, potentially leading to denial of service or arbitrary code execution.

CVE-2026-87931 is a critical buffer overflow vulnerability in the Behavioral Technology Group Pavlok Behavioral Conditioning Wearable, specifically in an unknown function of the Apple Notification Center Service Event Handler component. The vulnerability affects versions up to and including 20260707. Exploitation requires local network access and no user interaction or privileges are needed. The vendor has not responded to the disclosure, and no patch or remediation is currently available.

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

A buffer overflow vulnerability exists in NASA cFS versions 7.0.0 and 7.0.1 within the OS_read function of the SBN TCP Module. The flaw arises from improper handling of the MsgSz argument, allowing local network attackers to cause memory corruption. The vulnerability has a medium severity rating with a CVSS score of 6.3. No vendor response or patch is currently available.

A vulnerability in the file-psd plugin of GIMP allows improper validation of the channel-count parameter when processing specially crafted PSD image files. This can cause heap out-of-bounds reads and stack out-of-bounds accesses, potentially leading to application crashes (denial of service) or limited disclosure of memory contents. Exploitation requires user interaction by opening a malicious PSD file. The issue has a moderate severity rating and no known exploits in the wild have been reported.

CVE-2026-76651 is a buffer overflow vulnerability in the embedded HTTP service of TP-Link TL-WR841N v14. It occurs when processing multipart/form-data requests due to insufficient validation of an attacker-controlled boundary parameter. This can lead to memory corruption by overwriting data beyond an internal buffer. While arbitrary code execution, information disclosure, and denial-of-service have not been demonstrated, the vulnerability may cause undefined application behavior.

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.