CWE-122: Heap-based Buffer Overflow vulnerabilities

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A heap-based buffer overflow vulnerability exists in pymonocypher versions prior to 4.0.2.8 in the argon2i_32 implementation. The issue arises because the implementation does not verify the size of the nb_blocks parameter, allowing a buffer overflow if the caller provides an insufficiently sized buffer. This flaw has been fixed in version 4.0.2.8.

CVE-2026-78689 is a high-severity vulnerability in the NGINX JavaScript (njs) XML module's namespace prefix list parser. It can be triggered remotely without authentication via the xml.exclusiveC14n() method when an externally controlled XML namespace prefix list is passed. Both the njs and QuickJS engines are affected, causing out-of-bounds writes that lead to worker crashes or memory growth. The vulnerability affects the nginxinc/nginx-saml reference implementation during SAML signature verification, allowing crafted SAML messages to trigger the flaw without requiring a valid signature. Code execution has not been demonstrated but cannot be ruled out. This is a data plane issue causing denial of service through worker restarts or memory exhaustion. Versions from 0.7.10 up to but not including 1.0.1 are affected. No patch information is provided.

CVE-2026-84269 is a heap-based buffer overflow vulnerability in the AFP backend of GNOME gvfs. A malicious AFP server can send a length value exceeding the client’s buffer size during share mounting, causing the gvfsd-afp process to overflow a heap buffer and crash. This results in a denial of service. Exploitation requires a user to connect to a malicious AFP share, limiting exposure. The issue is fixed in gvfs version 1.60.2.

CVE-2026-84268 is a heap-based buffer overflow vulnerability in the SFTP backend of GNOME gvfs. A malicious SFTP server can send a length value exceeding the allocated buffer size during file read operations, causing memory corruption in the gvfsd-sftp process. This can lead to denial of service or potentially arbitrary code execution. The vulnerability affects gvfs versions prior to 1.60.2. Exploitation requires a user to connect to a malicious SFTP share. Security features like SELinux, ASLR, and NX help mitigate exploitation risks. A fix is available in gvfs version 1.60.2.

CVE-2026-75538 is an integer overflow vulnerability in Erlang OTP's inet driver when using {packet,4} mode on an open TCP port. An attacker can trigger a signed overflow in packet length calculation, causing a buffer overflow that corrupts the BEAM VM allocator metadata and likely crashes the VM. Exploitation for remote code execution is considered extremely unlikely. This affects multiple OTP and erts versions prior to specific fixed releases.

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

CVE-2026-81851 is a heap-based buffer overflow vulnerability in the iked process of WatchGuard Fireware OS. It allows an authenticated administrator to cause a denial of service by crashing the IKE daemon through saving a specially crafted configuration. The vulnerability affects specific versions of Fireware OS. No official patch or remediation guidance is currently provided by the vendor. The CVSS 4.0 score rates this vulnerability as medium severity.

Adobe Substance 3D Sampler versions 5.1.3 and earlier contain a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a malicious file. This vulnerability requires user interaction for exploitation. The flaw is identified as CWE-122 and has a high severity rating with a CVSS score of 7.8.

CVE-2026-77532 is a heap-based buffer overflow vulnerability in Ubiquiti Inc's EdgeMAX EdgeSwitch devices with DHCPv6 enabled. An attacker on an adjacent network can exploit this flaw to achieve remote code execution without user interaction. The vulnerability affects EdgeSwitch versions from 0 up to but not including 1.12.2. It has a high severity rating with a CVSS score of 8.8. No official patch information is provided in the input data.

A heap-based buffer overflow vulnerability exists in the PyOpenEXR Python bindings of AcademySoftwareFoundation's OpenEXR library versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13. This occurs when reading a crafted deep scanline EXR file with specific channel naming, causing memory corruption and a crash. The issue is fixed in versions 3.3.13 and 3.4.14.

A heap-based buffer overflow vulnerability exists in the PyOpenEXR component of AcademySoftwareFoundation's openexr library. This occurs in versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 when a specially crafted EXR file causes a channel-name key collision between literal and prefixed RGB channels. The overflow happens due to reuse of an undersized NumPy array during pixel decoding. This vulnerability is fixed in versions 3.3.13 and 3.4.14.

A heap-based buffer overflow vulnerability exists in the AcademySoftwareFoundation openexr project affecting the exrmultiview utility. This occurs when combining two attacker-supplied, individually valid scanline EXR files with a misaligned union dataWindow relative to one view's channel subsampling. The issue leads to a heap out-of-bounds write during normal processing. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are affected. The vulnerability is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. The vulnerability requires user interaction and affects the context of the current user. No specific affected versions or patches have been disclosed yet.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects the context of the current user. The issue has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed at this time.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution with user interaction. Exploitation requires a victim to open a specially crafted malicious file. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited. The CVSS score of 7.8 indicates a high severity issue with potential impact on confidentiality, integrity, and availability.

Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects the context of the current user. The vulnerability is rated high severity with a CVSS score of 7.8. No specific affected versions or patches have been provided yet.

Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability (CVE-2026-48423) that can lead to arbitrary code execution with user interaction. The vulnerability requires a victim to open a malicious file to be exploited. The CVSS score is 7.8, indicating high severity. No patch or official remediation information is currently available.