CWE-787: Out-of-bounds Write vulnerabilities

CVE-2026-17006 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.3, indicating a significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch information is provided in the available data.

CVE-2026-17003 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to compromise system confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant impact but requiring high attack complexity and no privileges. No known exploits are reported in the wild, and no patch or remediation details are currently provided.

CVE-2026-16996 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an integer underflow leading to an out-of-bounds write, which could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability has a CVSS 3.1 score of 8.8, indicating a significant risk if exploited. No public exploits are currently known, and no patch information is provided in the available data.

CVE-2026-16958 is an out-of-bounds write vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS v3.1 base score is 6.5, indicating a medium severity level. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-16951 is a heap-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local authenticated attacker with high privileges to execute arbitrary code on the affected systems. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no official patch or remediation details are provided in the available data.

CVE-2026-16946 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a local attacker to gain elevated privileges on the affected systems.

CVE-2026-16944 is a stack-based buffer overflow vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to execute arbitrary code on the affected systems. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no vendor patch information is provided in the available data.

CVE-2026-16943 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a local attacker with high privileges to execute arbitrary code. The vulnerability does not require user interaction and impacts confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

CVE-2026-16936 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (buffer overflow) that could allow a local attacker to execute arbitrary code. The vulnerability requires local privileges and no user interaction. It impacts confidentiality, integrity, and availability with a scope change.

CVE-2026-16934 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a local attacker to gain elevated privileges. The vulnerability has a CVSS score of 8.8, indicating a significant risk to confidentiality, integrity, and availability. No vendor patch or remediation information is currently provided.

CVE-2026-63387 is a stack-based buffer overflow vulnerability in libevent prior to versions 2.1.13 and 2.2.2-alpha. The flaw occurs in the evdns.c component when formatting DNS records, allowing a one-byte out-of-bounds write on the stack. This can be triggered by a crafted DNS server response containing certain DNS record types, potentially causing process crashes or memory corruption. The issue is fixed in libevent versions 2.1.13 and 2.2.2-alpha.

CVE-2026-63388 is a high-severity vulnerability in libevent, an event notification library. Versions prior to 2.1.13 and between 2.2.0-alpha and before 2.2.2-alpha are affected. The flaw is a heap out-of-bounds write caused by copying a kernel-supplied AF_UNIX peer address into a buffer that is too small. This can lead to memory corruption, impacting confidentiality, integrity, and availability. The issue is fixed in libevent versions 2.1.13 and 2.2.2-alpha.

SumatraPDF versions 3.6.1 and earlier contain a heap memory corruption vulnerability in the CHM file parser. A crafted CHM file with malformed LZX Huffman code lengths can cause out-of-bounds writes in the decompression code, leading to heap corruption. While arbitrary code execution has not been demonstrated, the flaw poses a risk of memory corruption during parsing. No fixed version is currently available.

CVE-2026-18295 is a high-severity vulnerability in GStreamer involving an out-of-bounds write during MRF file parsing. This flaw allows remote attackers to execute arbitrary code by exploiting improper validation of user-supplied data, leading to a write beyond the allocated buffer. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious webpage.

CVE-2026-18293 is a high-severity vulnerability in OriginLab Origin Viewer version 9.9.5 involving an out-of-bounds write during OPJ file parsing. This flaw allows remote attackers to execute arbitrary code by convincing a user to open a malicious file or visit a malicious page. The vulnerability arises from improper validation of user-supplied data, leading to memory corruption and potential code execution in the context of the current process.

CVE-2026-18290 is a high-severity vulnerability in OriginLab OriginPro involving an out-of-bounds write during OGG file parsing. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. The vulnerability arises from improper validation of user-supplied data, leading to a write beyond allocated memory.

CVE-2026-18289 is a high-severity vulnerability in OriginLab OriginPro involving an out-of-bounds write during OPJ file parsing. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. The vulnerability arises from improper validation of user-supplied data, leading to memory corruption and potential code execution.

CVE-2026-18288 is a high-severity vulnerability in OriginLab OriginPro involving an out-of-bounds write during parsing of OPJU files. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, and can lead to remote code execution in the context of the current process.

CVE-2026-18269 is an out-of-bounds write vulnerability in the tchdr_bytestream_read function of Kenwood DNR1007XR devices, specifically version 1.7.0003.1000. This flaw allows an attacker with physical access to execute arbitrary code with root privileges without requiring authentication.

Imager::File::PNG versions from 1.003 before 1.004 for Perl contain a heap buffer overflow vulnerability when reading PNG images with a tRNS transparency chunk. The vulnerability occurs because the row buffer is sized based on the original channel count, but libpng expands transparency into an extra alpha channel, causing a write past the end of the buffer. This can lead to heap corruption and process crashes when reading attacker-supplied PNG files.