CWE-787: Out-of-bounds Write vulnerabilities

CVE-2026-50538 is a heap-based buffer overflow vulnerability in LibVNCClient versions 0.9.12 through 0.9.15. A malicious or man-in-the-middle VNC server can exploit this flaw by sending a crafted FramebufferUpdate message that causes libvncclient to write attacker-controlled data beyond the framebuffer boundary. This vulnerability requires no authentication and triggers immediately upon connection, causing unconditional client crashes (denial of service) and potentially allowing remote code execution by overwriting application callback pointers. The issue is patched in a commit identified as 540332be3e0acc566fa64da6f1b4680c72c724dd.

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.

A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition and temporary loss of access to the router's web management interface.

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a value-less token is rejected. No in-product workarounds are available. As a stop-gap, an upstream reverse proxy or WAF that rejects or normalizes malformed `Cookie` headers (tokens lacking `=`) can reduce exposure, but upgrading is the recommended remediation.

CVE-2026-77642 is an out-of-bounds write vulnerability in Tor versions before 0.4.9.9. It occurs when parsing a consensus or detached signature with an unexpected signature digest type. The impact is generally minor for most Tor roles but can be significant for directory authorities. This vulnerability has a CVSS score of 7.5, indicating high severity.

CVE-2026-19783 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It allows a local attacker to cause kernel memory corruption by exploiting insufficient validation during directory reads of a crafted filesystem image. This can lead to a system crash or potentially privilege escalation.

CVE-2026-19437 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving an out-of-bounds write (buffer overflow) that could allow a remote attacker to execute arbitrary code without privileges or user interaction.

CVE-2026-18842 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write that could allow a local attacker to gain elevated privileges on the affected systems.

CVE-2026-18832 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges.

CVE-2026-18828 is a medium severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could be triggered remotely, potentially causing a denial of service. The vulnerability does not require user interaction or privileges to exploit. No known exploits are reported in the wild, and no official patch information is provided.

CVE-2026-17436 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a CVSS 3.1 base score of 8.8, indicating a significant risk to confidentiality, integrity, and availability.

CVE-2026-17425 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to cause a denial of service via a stack buffer overflow. The vulnerability does not impact confidentiality or integrity but results in service disruption. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-17422 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It allows a local attacker to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability is due to an out-of-bounds write condition. No patch information is currently provided.

CVE-2026-17195 is an out-of-bounds write vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability.

CVE-2026-17168 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could allow a remote authenticated attacker to execute arbitrary code. The vulnerability requires low privileges and no user interaction but has a high attack complexity. It impacts confidentiality, integrity, and availability with a scope change. No patch information is provided in the source data.

CVE-2026-17157 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17152 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17141 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a CVSS 3.1 base score of 9.8, indicating a high impact on confidentiality, integrity, and availability.

CVE-2026-17122 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17120 is an out-of-bounds write vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to cause a denial of service by triggering a buffer overflow condition. The vulnerability does not impact confidentiality or integrity but can disrupt availability. The CVSS v3.1 base score is 5.3, indicating medium severity. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.