CVE-2026-44254 is a medium severity vulnerability in Wazuh affecting versions from 1.0.0 up to but not including 4.14.6 and from 5.0.0-beta1 up to but not including 5.0.0-beta2. It involves an incorrect calculation of buffer size in the remoted daemon component, leading to a stack out-of-bounds write when processing certain encrypted agent messages. This can cause crashes and disrupt agent communications. The issue is fixed in versions 4.14.6 and 5.0.0-beta2.
CVE-2026-16814 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability is classified under CWE-787 (Out-of-bounds Write).
CVE-2026-16706 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could be exploited remotely to cause a denial of service. The vulnerability does not impact confidentiality or integrity but can disrupt availability. No known exploits are reported in the wild, and no patch information is provided in the available data.
nnn version 5.2 contains an out-of-bounds write vulnerability (CWE-787) triggered by improper validation of length fields deserialized from session files. A crafted malicious session file placed in the victim's session directory and loaded with the -s option can cause memory corruption by writing beyond fixed-size global buffers. This vulnerability was confirmed in version 5.2. No explicit patch or fixed version has been provided by the maintainer.
CVE-2026-58088 is a race condition vulnerability in FreeBSD's ELF core dump code. The flaw arises because the code counts dumpable VM map entries and allocates a buffer, then iterates again to populate program headers. A process sharing the address space via rfork(2) can modify the map between these passes, causing an out-of-bounds write on the kernel heap. This can be triggered by an unprivileged local user sharing an address space with a process that dumps core, potentially leading to privilege escalation.
CVE-2026-58087 is an integer underflow vulnerability in FreeBSD's semctl(2) system call affecting the GETALL and SETALL commands. The flaw arises due to sequence number wrapping after 0x8000 create/destroy cycles of semaphore sets, allowing an attacker to bypass validation and cause out-of-bounds reads and writes on kernel heap memory. This can be exploited by an unprivileged local user to potentially escalate privileges. The vulnerability affects FreeBSD versions 14.4-RELEASE, 15.0-RELEASE, and 15.1-RELEASE. It has a high severity rating with a CVSS score of 7.8. No patch information is provided in the input data.
CVE-2026-62291 is a medium severity vulnerability in strukturag's libheif (version 1.23.0 and earlier) involving an out-of-bounds read and write caused by inconsistent handling of auxiliary alpha plane dimensions during image decoding and encoding. This flaw can lead to heap corruption when processing crafted image sequences with mismatched primary and auxiliary plane sizes. The issue is fixed in libheif version 1.23.1.
An integer overflow vulnerability exists in the websock_decode() function of the baresip re library prior to version 4.8.1. This occurs when validating a masked WebSocket frame with 64-bit extended length encoding, allowing a wraparound in the calculation 4 + hdr->len. This leads to a bounds check bypass and subsequent heap buffer overflow during XOR unmasking. Applications using websock_accept() or websock_accept_proto() to implement WebSocket servers are affected. Exploitation can cause heap corruption or denial of service after the HTTP WebSocket upgrade handshake. The issue is fixed in version 4.8.1.
Dell PowerStore 500T contains a critical out-of-bounds write vulnerability in its SMB/CIFS implementation. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted SMB packet, potentially causing a persistent denial of service or enabling remote code execution. The vulnerability is identified as CWE-787 and has a CVSS score of 9.8, indicating high severity. No patch information is provided in the available data.
CVE-2026-65334 is a medium severity memory corruption vulnerability in Safari and related Apple operating systems. The flaw could cause Safari to crash when processing maliciously crafted web content. It has been fixed with improved state management in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27.
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.
CVE-2026-73193 is a critical integer overflow vulnerability in DBI for Perl versions before 1.652 on 32-bit Perl builds. It allows a heap out-of-bounds write due to an integer wraparound in the output buffer size calculation during statement preprocessing. This can lead to memory corruption when processing very large input statements. 64-bit Perl builds are not affected. The vulnerability has a CVSS score of 9.8, indicating high severity.
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse.
preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with `atoi(src)` and assigns it to the binder counter with no range check, so a statement containing ':2147483648' leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following '?' then expands through `sprintf(start, ":p%d", idx++)` to ':p-2147483648', 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes.
Any caller that preparses an untrusted statement into ':pN' style placeholders gets a heap out-of-bounds write that grows with the number of '?' marks following the poisoned placeholder. The '?' and '%s' return styles compare the parsed number against the expected sequence and error out, and are unaffected.
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the process-image buffer and corrupt adjacent kernel memory, resulting in kernel memory corruption and denial of service, by supplying crafted device configuration data and crafted input through the piControl character device.
IBM i versions 7.3 through 7.6 contain a stack-based buffer overflow vulnerability in the Native IBM i JSSE provider due to improper bounds checking during TLS session establishment. A local authenticated attacker could exploit this to overflow a fixed-length buffer, potentially executing arbitrary code or causing the JVM process to crash. The vulnerability is identified as CWE-787 and has a CVSS 3.1 base score of 7.3, indicating high severity.
CVE-2026-18086 is a medium severity vulnerability in IBM i versions 7.3 through 7.6. It involves an out-of-bounds write due to improper bounds checking, which could allow a local attacker to execute arbitrary code or cause a denial of service.
CVE-2026-17502 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves an out-of-bounds write that could be exploited remotely to cause a denial of service. The vulnerability does not require user interaction or privileges to exploit. No official patch or remediation information is currently available.
CVE-2026-17476 is an out-of-bounds write vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. This flaw could allow a remote attacker to cause a denial of service by improperly writing to a buffer. The vulnerability has a medium severity rating with a CVSS score of 4.8.
CVE-2026-17272 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 that allows a remote attacker to cause a denial of service via a buffer overflow (CWE-787). The vulnerability does not impact confidentiality but can lead to integrity loss and service disruption. No official patch or remediation guidance has been provided yet.