CWE-122: Heap-based Buffer Overflow vulnerabilities

CVE-2026-52834 is a heap-based buffer overflow vulnerability in the tirr-c jxl-oxide JPEG XL decoder affecting versions prior to 0.12.6 and 0.6.2. On 32-bit platforms, crafted JPEG XL images can cause length calculation overflows leading to out-of-bounds writes during image decoding and rendering. This can result in memory corruption, denial of service, or arbitrary code execution. The issue is fixed in jxl-grid version 0.6.2 and jxl-oxide version 0.12.6.

A heap buffer overflow vulnerability exists in PostgreSQL's pg_stat_statements module that allows a query author to execute arbitrary code as the operating system user running the database. This issue affects PostgreSQL major version 18, specifically versions from 18.0 up to but not including 18.5. Versions prior to 18.0 are not affected. A patch is available to address this vulnerability.

CVE-2026-58081 is a critical heap-based buffer overflow vulnerability in FreeBSD's iconv encoding modules for HZ, UTF-7, VIQR, and ZW. These modules fail to properly check the size of the output buffer before writing converted characters. Applications using iconv(3) with untrusted input and affected encodings may be vulnerable to buffer overflows, potentially leading to severe impacts on confidentiality, integrity, and availability.

CVE-2026-49430 is a heap-based buffer overflow vulnerability in FreeBSD's ZFS implementation. It occurs in the ZFS_IOC_RECV_NEW ioctl during the heal receive path, where a 64-bit payload size is truncated to 32 bits for allocation but the original 64-bit size is used for a byteswap operation. A local user with delegated ZFS 'receive' permission can exploit this to cause kernel memory corruption.

CVE-2026-49429 is a heap-based buffer overflow vulnerability in FreeBSD's ZFS_IOC_USERSPACE_MANY ioctl interface. The flaw arises because the kernel truncates a 64-bit output buffer size to 32 bits for allocation but uses the original 64-bit size when writing data, leading to a potential overflow. A local user with delegated ZFS 'userused' permission can exploit this to cause a kernel heap overflow and potentially escalate privileges.

CVE-2026-72970 is a heap-based buffer overflow vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to execute code remotely over a network. The flaw affects versions from 1.0.0.0 up to but not including 151.0.4129.86. Microsoft has released an official fix in version 151.0.4129.86. The vulnerability has a high severity rating with a CVSS score of 8.3. No known exploits in the wild have been reported at this time.

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.