CVE-2026-19568 is a high-severity buffer overflow vulnerability in Autodesk 3ds Max. It arises from improper handling of maliciously crafted SVG files, leading to memory corruption. Successful exploitation can allow arbitrary code execution within the context of the affected process. The vulnerability affects specific versions of Autodesk 3ds Max, including 2026.0.0 and 2027.0.0. No official patch or remediation guidance is currently available from the vendor. The vulnerability requires local access with user interaction to exploit, as indicated by the CVSS vector.
CVE-2026-17040 is a critical buffer overflow vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw allows a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability arises from improper handling of input sizes during buffer copying, classified as CWE-120. It has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-18280 is a buffer overflow vulnerability in the gpsd daemon of Sony XAV-9500ES devices, specifically version 3.02.00. It arises from improper validation of the length of NMEA data before copying it into a fixed-length buffer. This flaw can be exploited by an attacker with physical access to execute arbitrary code without requiring authentication. The vulnerability has a low CVSS score of 3.9, indicating limited impact and complexity in exploitation.
CVE-2026-18279 is a high-severity buffer overflow vulnerability in the Sony XAV-9500ES device. It occurs due to improper validation of the length of user-supplied data in RTSP SETUP packets, allowing network-adjacent attackers to execute arbitrary code without authentication.
CVE-2026-14970 is a high severity buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The issue causes the NIM server process to crash during client registration due to a buffer copy operation without checking the size of the input.
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-70415 is a high-severity buffer overflow vulnerability in Dell PowerStore 500T's NFS/RPC component. It allows an unauthenticated remote attacker to potentially execute commands or cause denial of service by exploiting improper input size checking during buffer copy operations.
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain conditions, execute unintended code.
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
A buffer overflow vulnerability in open62541 version 1.5.5 allows a remote attacker to cause a denial of service by exploiting improper validation of input arguments in the Service_Call function. This vulnerability affects specific versions including 1.5.5 and several 1.4.x builds. The flaw arises from the Service_Call function not properly validating input arguments against runtime-resolved InputArguments metadata, leading to potential memory corruption and service disruption.
Tapo P110 v1
smart Wi-Fi Plug contains an improper boundary validation vulnerability in the
handling of authenticated HTTP request bodies due to insufficient input
validation before memory copy operations. This may lead to buffer overflow condition,
causing the web service process to crash.
Successful exploitation
may cause the web service process to stop responding or restart, resulting in a
denial-of-service condition.
CVE-2026-24080 is a high severity buffer overflow vulnerability in Qualcomm Snapdragon fingerprint TA. It involves memory corruption triggered by malformed request parameters. The flaw affects specific Snapdragon versions including QCA6696, SW6100, WSA8840, and WSA8845. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-24076 is a medium severity buffer overflow vulnerability in Qualcomm Snapdragon products. It involves memory corruption when processing registry values with incorrect types using a direct query method. The flaw is categorized as CWE-120, a classic buffer overflow due to copying data without checking input size. No official patch or remediation information is currently available. The vulnerability affects multiple Snapdragon chipsets and related products. There are no known exploits in the wild at this time.
CVE-2026-11885 is a high-severity buffer overflow vulnerability in IBM PowerVM Hypervisor versions FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1. A specially crafted OS hypervisor call can cause the hypervisor to crash or compromise OS memory integrity. This vulnerability is classified as CWE-120, indicating a classic buffer copy without checking the size of input. The vulnerability has a CVSS 3.1 score of 8.4, reflecting high impact on integrity and availability with low attack complexity and limited privileges required. No patch or official remediation information is currently available, and no known exploits are reported in the wild.
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.
Security Fix(es):
* postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single text-encoded H.248/Megaco message containing an oversized property parm name.
When tokenizing a Local/Remote descriptor, mfs_load_property_groups extracts the attacker-controlled property name (bounded only by the message length) and, when no value follows, formats it into a fixed 512-byte error_msg field of the MfsErlDrvData struct using an unchecked sprintf call. Names longer than roughly 452 bytes overflow into the immediately following struct fields (text_buf, text_ptr, term_spec, term_spec_size, term_spec_index), overwriting live pointers and counters with attacker-chosen bytes. Subsequent scanner code writes and frees through the corrupted pointers, producing arbitrary write and arbitrary free primitives inside the BEAM VM process, which can be leveraged for remote code execution. On builds compiled with _FORTIFY_SOURCE the overflow is detected at runtime and terminates the process with SIGABRT, resulting in denial of service.
The overflow occurs in the flex scanner before any grammar or Megaco-level authentication processing, so exploitation requires only network reachability to the megaco transport port on a node configured with {scanner, flex}.
This vulnerability is associated with program files lib/megaco/src/flex/megaco_flex_scanner_drv.flex.src and program routines mfs_load_property_groups.
This issue affects OTP from OTP 17.0 before OTP 27.3.4.15, from OTP 28.0 before OTP 28.5.0.4, and from OTP 29.0 before OTP 29.0.4, corresponding to megaco from 3.17.1 before 4.7.2.2, from 4.8 before 4.8.3.1, and from 4.9 before 4.9.1. Whether OTP before OTP 17.0, corresponding to megaco before 3.17.1, is affected is unknown.
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either a misconfigured pool size or a malicious/compromised controller on the other end of the HCI socket link, not over-the-air Bluetooth access.
This issue affects Apache NimBLE: through 1.9.0.
Users are recommended to upgrade to version 1.10.0, which fixes the issue.