PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17.
Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23.
Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_int() and golioth_payload_as_float() helpers copy network-supplied payload data into fixed-size stack buffers using memcpy() with a length derived from payload_size. The only length checks are guarded by assert(); in release builds, the asserts are compiled out and memcpy() may copy an unbounded payload_size. Payloads larger than 12 bytes (int) or 32 bytes (float) can overflow the stack, resulting in a crash/denial of service. This is reachable via LightDB State on_payload with a malicious server or MITM.
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.
The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges.
First identified on Nissan Leaf ZE1 manufactured in 2020.
The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges.
First identified on Nissan Leaf ZE1 manufactured in 2020.
The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges.
First identified on Nissan Leaf ZE1 manufactured in 2020.
The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code execution on the infotainment main SoC to perform code execution on the RH850 module and subsequently send arbitrary CAN messages over the connected CAN bus.
First identified on Nissan Leaf ZE1 manufactured in 2020.
CVE-2025-48725 is a buffer overflow vulnerability in QNAP Systems Inc. 's QuTS hero operating system versions h5.3.x. A remote attacker with a valid user account can exploit this flaw to modify memory or crash processes, potentially causing denial of service or instability. The vulnerability requires low privileges (a user account) but no user interaction. It has a low CVSS 4.0 score of 0.6 due to limited impact and exploitation complexity. The issue is fixed in QuTS hero version h5.
A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution.
A security update for libsoup2 addresses a stack-based buffer overflow vulnerability (CVE-2026-1761) caused by incorrect length calculation when parsing multipart HTTP responses. This vulnerability is rated as high severity. The issue affects multiple versions of libsoup2 in SUSE and Red Hat Enterprise Linux distributions. A patch is available and should be applied to mitigate the risk.
A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution.
CVE-2026-22904 is a critical stack-based buffer overflow vulnerability in the WAGO 0852-1322 device caused by improper length handling when parsing multiple cookie fields, including TRACKID. An unauthenticated remote attacker can exploit this by sending oversized cookie values, leading to denial-of-service or potential remote code execution. The vulnerability has a CVSS score of 9.8, indicating high severity with no authentication or user interaction required. No known exploits are currently reported in the wild. European organizations using WAGO 0852-1322 controllers, especially in industrial automation sectors, are at significant risk. Mitigation requires immediate vendor patching once available and network-level protections to restrict access to affected devices. Countries with strong industrial automation presence such as Germany, France, and Italy are most likely to be impacted.
CVE-2026-22903 is a critical stack-based buffer overflow vulnerability in the WAGO 0852-1322 device's modified lighttpd server. An unauthenticated remote attacker can exploit this by sending an HTTP request with an excessively long SESSIONID cookie, causing the server to crash and potentially allowing remote code execution. The vulnerability arises due to missing stack protections, making exploitation easier and more impactful. This flaw affects the availability, integrity, and confidentiality of the device and connected systems. No patches are currently available, and no known exploits are reported in the wild yet. European organizations using WAGO 0852-1322 devices, especially in industrial automation and control systems, are at high risk. Mitigation requires network-level protections, strict input validation, and monitoring for anomalous HTTP requests. Countries with significant industrial automation sectors and WAGO market presence, such as Germany, France, and the Netherlands, are most likely to be affected. Given the critical CVSS score of 9.8, immediate attention and proactive defense measures are essential to prevent exploitation.
time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.
CVE-2026-25584 is a high-severity stack-based buffer overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.3. It occurs in the CIccTagFloatNum<>::GetValues() function when processing specially crafted ICC color profiles, allowing out-of-bounds writes on the stack. This can lead to memory corruption, potentially enabling information disclosure or arbitrary code execution. Exploitation requires local access and user interaction to process a malicious ICC file, but no privileges are needed. The vulnerability has been patched in version 2.3.1.
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
