CWE-119: Memory Buffer Overflow vulnerabilities

CVE-2026-120596 is a denial-of-service vulnerability in the Nut/Net TCP/IP stack used in Nut/OS by Ethernut/Egnite. The flaw allows an unauthenticated attacker to send a specially crafted TCP segment with an unknown TCP option length of zero, causing an infinite loop in the TCP options parser. This infinite loop blocks the TCP processing thread, making all TCP services on the device unresponsive until reboot. The vulnerability affects Nut/OS versions up to 5.1.

CVE-2026-45450 is a high-severity vulnerability in Unitronics UniStream Pro (B10 / C10) and UniLogic versions prior to 1.41.329. It involves improper restriction of operations within the bounds of a memory buffer, classified as CWE-119. This flaw could allow an attacker with low privileges and no user interaction to achieve high impact on confidentiality and integrity, and low impact on availability.

IBM Power Systems Firmware versions FW1060.00 through FW1060.81 contain a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can send crafted mailbox messages to read or modify arbitrary Hostboot memory regions. This compromises the host firmware boot stack and the hypervisor loaded by it, impacting confidentiality, integrity, and availability of the managed system.

A use-after-free vulnerability exists in GPAC up to version 26.07.0 in the gf_fq_pop function of the MP4Box component. This vulnerability can be triggered remotely and may lead to limited confidentiality, integrity, and availability impacts. Exploit code is publicly available. The vendor has not responded to disclosure attempts and no patch information is provided.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overrun vulnerability in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. This flaw allows a remote attacker to send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector, potentially causing denial of service or arbitrary code execution on the Collector appliance. The vulnerability is identified as CWE-119 and has a CVSS 3.1 score of 8.1, indicating high severity.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker with low privileges to execute arbitrary code. The vulnerability is classified as CWE-119 and has a CVSS 3.1 score of 7.5, indicating high severity. No patch or remediation information is provided in the available data.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based buffer overflow vulnerability in the MongoDB protocol parser. This flaw arises when a remote attacker sends a specially crafted MongoDB SCRAM username with excessive length, leading to memory corruption. The vulnerability can result in denial of service or arbitrary code execution. The CVSS score is 8.1, indicating high severity.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based buffer overflow vulnerability in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size buffer, potentially causing denial of service or arbitrary code execution.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a vulnerability in the WfpMonitor kernel driver where certain IOCTL handlers improperly validate user-supplied pointers. This flaw can allow a privileged local attacker to cause a system crash or perform limited kernel-memory reads.

A heap-based buffer overflow vulnerability exists in GIMP's Hot color filter plug-in due to an integer overflow when calculating pixel buffer size for very large images. This causes the allocated buffer to be smaller than needed, leading to out-of-bounds memory access when the filter processes pixels based on the actual image size. The vulnerability affects multiple specific versions of GIMP. The CVSS score is 6.3, indicating a medium severity level.

A heap-based buffer overflow vulnerability exists in GIMP's raw data export plug-in. This flaw occurs when exporting very large images due to an integer overflow in memory allocation calculations, leading to insufficient memory allocation and potential memory corruption. The vulnerability has a CVSS score of 6.3, indicating medium severity. It affects multiple specific versions of GIMP as listed. There is no information about available patches or vendor advisories confirming remediation status. No known exploits are reported in the wild.

A heap-based buffer overflow vulnerability exists in GIMP's PCX export plug-in. This occurs when exporting images with extremely large dimensions, causing a 32-bit integer overflow during buffer allocation and resulting in insufficient memory allocation. The subsequent operations use the full intended size, leading to a buffer overflow. The vulnerability has a CVSS score of 6.3, indicating medium severity.

A vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux allows a local user to cause the kernel mode driver to dereference an untrusted pointer. Exploiting this flaw could result in denial of service and information disclosure. The vulnerability is classified under CWE-119, indicating improper restriction of operations within the bounds of a memory buffer. The CVSS v3.1 score is 7.1, reflecting high severity. No affected versions or patch information are provided.

CVE-2026-47550 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows. It involves improper restriction of operations within the bounds of a memory buffer in the kernel mode layer, allowing an unprivileged local user to supply an untrusted pointer that the driver dereferences without validation. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-100763 is a critical vulnerability in Mozilla Thunderbird's Graphics: WebGPU component caused by incorrect boundary conditions. It allows an attacker to cause a denial of service and potentially impact confidentiality. The vulnerability was fixed in Thunderbird version 157.

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

A use-after-free vulnerability exists in GPAC 26.08-DEV in the function gf_node_deactivate_ex within the MP4Box component. This vulnerability requires local access to exploit and can cause a denial of service by crashing the application. The issue has been publicly disclosed but no active exploitation in the wild is reported. Upgrading to version abi-16.24 addresses this vulnerability.

A use-after-free vulnerability exists in the gpac 26.08-DEV version within the function gf_sg_command_del in the BIFS Handler component. This vulnerability requires local access to exploit and can cause a denial of service. A patch is available in version abi-16.24 that resolves this issue.

CVE-2026-92178 is a high-severity memory corruption vulnerability in pdfforge PDF Architect version 9.1.83.23106. It arises from improper validation of user-supplied data during PDF file parsing, leading to potential remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability allows attackers to execute arbitrary code with the privileges of the current process.

CVE-2026-19886 is a high-severity memory corruption vulnerability in OriginLab Origin Viewer version 9.9.5. It arises from improper validation during the parsing of OGM files, allowing remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability is identified as CWE-119, indicating improper restriction of operations within memory buffer bounds.