Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary.
To remediate this issue, users should upgrade to FreeRTOS-Kernel V11.3.3, rebuild, and reflash affected firmware. Builds that do not enable queue sets are not affected.
CVE-2026-65584 is a stack-based buffer overflow vulnerability in Imagination Technologies Graphics DDK. It arises from improper GPU system calls by non-privileged users, leading to a buffer write beyond the allocated stack array when processing resolved Linux/Android fence synchronization checkpoints. Exploitation can cause kernel memory corruption and typically results in a denial-of-service via kernel crash.
CVE-2026-118610 is a high-severity stack-based buffer overflow vulnerability in the Android Auto service of Alpine iLX-F511 devices, specifically version 7.0.000. It allows network-adjacent attackers to execute arbitrary code with root privileges without requiring authentication.
CVE-2026-118609 is a stack-based buffer overflow vulnerability in the Android Auto connection handler of Alpine iLX-F511 devices, specifically version 7.0.000. This flaw allows a physically present attacker to execute arbitrary code with root privileges without requiring authentication. The vulnerability arises from improper validation of user-supplied data length before copying it to a fixed-length stack buffer.
CVE-2026-118605 is a stack-based buffer overflow vulnerability in the Alpine iLX-F511 device, specifically in the prh_sdp_service_search_decode function. This flaw allows a network-adjacent attacker who can pair a malicious Bluetooth device with the target to execute arbitrary code with root privileges. The vulnerability arises due to improper validation of user-supplied data length before copying it to a stack buffer. It has a high severity rating with a CVSS score of 8.0.
CVE-2026-118604 is a stack-based buffer overflow vulnerability in the framework service of Alpine iLX-F511 devices, specifically version 7.0.000. It allows an attacker with physical access to execute arbitrary code with root privileges without requiring authentication.
CVE-2026-118603 is a stack-based buffer overflow vulnerability in the Alpine iLX-F511 device's vCard parsing functionality. It allows a network-adjacent attacker to execute arbitrary code with root privileges if the target connects to a malicious Bluetooth device. Exploitation requires user interaction. The flaw arises from improper validation of user-supplied vCard data before copying it into a fixed-length stack buffer.
CVE-2026-103408 is a stack-based buffer overflow vulnerability in the DHCP client of Juniper Networks Session Smart Router. It allows an unauthenticated attacker on the local network to execute remote code by sending a malicious DHCP reply. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and several LTS releases contain a stack-based buffer overflow vulnerability (CWE-121). This flaw allows an unauthenticated remote attacker to potentially execute arbitrary commands on the affected system. The vulnerability is critical with a CVSS score of 9.8. Fixed versions are available starting from 8.9.0.0 and corresponding LTS patch releases.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including multiple LTS releases, contain a stack-based buffer overflow vulnerability (CWE-121). This flaw allows a low privileged attacker with remote access to potentially gain unauthorized access. The vulnerability has a high severity with a CVSS score of 8.8. Fixed versions are available starting from 8.9.0.0 and corresponding LTS patch releases.
Adobe Substance 3D Painter contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a crafted malicious file. The vulnerability affects versions from 0 up to and including 12.1.5. The CVSS score is 7.8, indicating high severity.
CVE-2026-103593 is a critical stack-based buffer overflow vulnerability in the WatchGuard Fireware OS logging service. It allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate. The vulnerability affects multiple versions of Fireware OS prior to fixed releases. A high-severity CVSS 4.0 score of 9.1 reflects the potential for privilege escalation and remote code execution without user interaction.
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request.
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
CVE-2026-93857 is a critical stack-based buffer overflow vulnerability in WatchGuard Fireware OS's SIP proxy. It allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy using the SIP proxy. The vulnerability affects multiple versions of Fireware OS prior to fixed releases. A high-severity CVSS score of 9.2 reflects the potential for remote code execution without user interaction or privileges.
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and several LTS releases contain a stack-based buffer overflow vulnerability (CWE-121). This flaw can be exploited by a high privileged attacker with remote access to cause a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. Fixed versions are available starting from 8.9.0.0 and respective LTS patch levels.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and certain LTS releases contain a stack-based buffer overflow vulnerability (CWE-121). This flaw can be exploited by a high privileged attacker with remote access to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. Fixed versions are available starting from 8.9.0.0, 8.6.1.30, 8.3.1.50, and 7.13.1.90 depending on the release line.
Dell PowerProtect Data Domain versions 7.7.1.0 through LTS 2026, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20 contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a highly privileged remote attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0 or later.
CVE-2026-111548 is a stack-based buffer overflow vulnerability in the web management interface of Moxa NPort W2150A-W4 and W2250A-W4 wireless device servers. An authenticated remote attacker with low privileges can exploit insufficient bounds checking of user input to cause the web management service to become unresponsive. Recovery requires power cycling the affected device, though other device functions continue to operate normally. The vulnerability affects firmware versions from 1.0 through 1.5 inclusive. The CVSS 4.0 base score is 5.3, indicating medium severity.