CWE-119: Memory Buffer Overflow vulnerabilities

Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16360 addresses multiple memory safety bugs in Thunderbird ESR 140.12 and Thunderbird 152. These bugs include evidence of memory corruption and could potentially be exploited to execute arbitrary code. The vulnerabilities were fixed in Thunderbird 140.13 and Thunderbird 153, as well as Firefox ESR 115.38, Firefox ESR 140.13, and Firefox 153. The issues are critical in severity and relate to improper memory handling.

CVE-2026-16361 is a set of memory safety bugs affecting Thunderbird ESR 140.12 and Firefox ESR 115.37 and 140.12. These bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code. The vulnerabilities were fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13. No known exploits in the wild have been reported. The issues are considered critical due to the potential for arbitrary code execution.

CVE-2026-16097 is a high-severity stack-based buffer overflow vulnerability in Shibby Tomato version 1.28 affecting the Scheduler Name Handler component. The vulnerability arises from improper handling of the argument 'a1' in function sub_42537C, allowing remote attackers to potentially exploit the flaw. The project Shibby Tomato has been superseded by FreshTomato. No patch or official fix information is provided.

CVE-2026-55398 is a memory management vulnerability affecting Absolute Security's Secure Access clients and servers prior to version 14.55. This flaw allows attackers with detailed knowledge and full control over the tunnel protocol to cause a non-persistent denial-of-service (DoS) condition against the server. The vulnerability is classified as medium severity with a CVSS 4.0 base score of 6.9.

CVE-2026-33444 is a memory management vulnerability affecting Absolute Security Secure Access servers prior to version 14.55. The flaw allows attackers with detailed knowledge and full control over the tunnel protocol to cause a non-persistent denial of service (DoS) against the server. The vulnerability is classified with a medium severity and has a CVSS 4.0 base score of 6.9. There is no official remediation level or patch explicitly stated in the available data.

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. This project is superseded by FreshTomato.

A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.

A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.

A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.14.8396 will fix this issue. This patch is called 3d0f9fc2eddbd6579c99af3111c37c98f03475d0. You should upgrade the affected component.

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.14 is sufficient to fix this issue. The name of the patch is 18fd542bb4d5ccedf9de12052bf50068b2b26f06. It is suggested to upgrade the affected component.

CVE-2026-15105 is a medium severity vulnerability in davenardella snap7 up to version 1.4.3. It affects the TS7Worker::PerformFunctionRead function in the src/core/s7_server.cpp file, specifically the ReadVar Request Handler component. The flaw causes an out-of-bounds write, which requires local network access to exploit. Public exploit code has been published, but the project has not yet responded or issued a fix.