QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
A stack-based buffer overflow vulnerability exists in FreeRDP versions 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support. The flaw occurs in the wprintKeyName() function of WinPR's NCrypt PKCS#11 provider, which hex-encodes a key's CKA_ID into a fixed 128-byte stack buffer. If an attacker supplies a malicious PKCS#11 token or module with a key and matching certificate using a 55- to 64-byte CKA_ID, it can overflow the stack during key enumeration and cause a client crash.
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.
IBM Planning Analytics versions 2.0 and 2.1 contain a stack-based buffer overflow vulnerability that could allow a remote authenticated attacker to execute arbitrary code. This vulnerability has a high severity rating with a CVSS score of 8.1. No official patch or remediation information is provided in the available data.
CVE-2026-53922 is a stack-based buffer overflow vulnerability in the odhcpd DHCP server component of OpenWrt. It allows an unauthenticated attacker on the same network link to send crafted DHCPv6 RENEW messages with multiple IA_NA options, triggering a buffer overflow in the server's stack buffer. This overflow leads to process termination via stack canary detection, causing denial of service by repeatedly disrupting DHCPv6 service. No code execution has been observed from this vulnerability.
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 contain a stack-based buffer overflow vulnerability in the host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can exploit this by supplying crafted configuration data, causing the host firmware boot stack to crash and potentially corrupt memory during system initialization. This leads to integrity and availability impacts on the managed system.
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 contain a stack-based buffer overflow vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can exploit this flaw by sending a specially crafted mailbox message, leading to arbitrary code execution within the host firmware runtime. This vulnerability allows full access to the managed system's memory and hardware interfaces, impacting confidentiality, integrity, and availability.
A stack-based buffer overflow vulnerability (CWE-121) exists in IBM Power Systems Firmware versions FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81. The flaw is in the host firmware boot process image validation path. An attacker with service processor access can supply a malicious code update image, enabling arbitrary code execution on the host system. This can compromise confidentiality, integrity, and availability of the affected host.
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 contain a stack-based buffer overflow vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can exploit this flaw by sending a specially crafted mailbox message, leading to arbitrary code execution within the host firmware runtime. This vulnerability compromises the confidentiality, integrity, and availability of the managed system by granting full access to system memory and hardware interfaces.
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 contain a stack-based buffer overflow vulnerability in the host firmware configuration parsing. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can supply crafted configuration data that causes memory corruption during the system Initial Program Load (IPL). This corruption affects the host firmware boot stack and the hypervisor loaded afterward, leading to potential compromise of confidentiality, integrity, and availability of the managed system.
A stack-based buffer overflow vulnerability exists in IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5. This flaw can be triggered by executing a specially crafted query involving a Materialized Query Table, resulting in a denial of service condition.
CVE-2026-66086 is a high-severity stack-based buffer overflow vulnerability in the modem OTA stack of Unisoc (Shanghai) Technologies Co., Ltd. modems. It arises from improper validation of scheduling information in SIB1 messages. Exploitation could allow remote code execution or denial of service without requiring additional privileges.
CVE-2026-104115 is a stack-based buffer overflow vulnerability in the illumos reparse point daemon (reparsed). It allows a local user to crash the daemon by sending an nfs-basic request with an overlong host or path component. The flaw arises because the daemon copies these components into a fixed 1024-byte stack buffer without length checks. Systems built with stack protection will abort the daemon on overflow, causing the related filesystem reparse service to enter maintenance mode. This service is disabled by default. The vulnerability has existed since 2009 and affects illumos distributions prior to a specific commit fixing the issue.
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem() while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values can cause attacker-selected bytes to overwrite stack control data, while tested builds terminate through the stack cookie check. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.
An
unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the
RTSP streaming service on TCP port 554 when the Camera Account feature is
enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory
corruption and crash the streaming daemon.
Successful
exploitation may allow an unauthenticated adjacent-network attacker to disrupt
live video and related streaming functions until the affected service recovers
or restarts.
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a stack-based buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability has a high severity with a CVSS score of 8.1. No patch or remediation information is currently provided. There are no known exploits in the wild at this time.
CVE-2026-15781 is a high-severity stack-based buffer overflow vulnerability in IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. This flaw allows a remote authenticated attacker to execute arbitrary code on the affected systems. The vulnerability requires high attack complexity and privileges, with no user interaction needed. It impacts confidentiality, integrity, and availability of the system. No explicit patch or remediation information is provided in the source data.