Browse CVEs

MEDIUM 5.5 CVE-2025-70309 A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file. Gpac No fix yet Fix from $1,6002026-01-15 HIGH 7.5 CVE-2025-70656 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70304 A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packe… Gpac No fix yet Fix from $1,9502026-01-15 MEDIUM 5.5 CVE-2025-70305 A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file. Gpac No fix yet Fix from $1,6002026-01-15 HIGH 7.5 CVE-2025-70744 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows att… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-71019 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows atta… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70747 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 HIGH 7.5 CVE-2025-71021 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows at… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 CRITICAL 9.8 CVE-2023-54330 Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthenticated attackers to execute a… Inbit Messenger after 4.9.0 Fix from $2,3002026-01-13 CRITICAL 9.8 CVE-2023-54334 Explorer32++ 1.3.5.531 contains a buffer overflow vulnerability in Structured Exception Handler (SEH) records that allows attackers to execute arbitr… Explorer\+\+ Mitigation only Fix from $2,3002026-01-13 CRITICAL 9.8 CVE-2023-54329 Inbit Messenger 4.6.0 - 4.9.0 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands b… Inbit Messenger after 4.9.0 Fix from $2,3002026-01-13 HIGH 7.2 CVE-2025-37169 A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an auth… Arubaos 10.4.1.10 / 10.7.2.2+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21224 Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. Azure Connected Machine Agent 1.60+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-70753 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71023 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability a… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71024 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnera… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71025 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerabi… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71026 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerabil… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71027 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerabilit… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 8.8 CVE-2025-66176 There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker o… Ds K1t331 Firmware 3.7.80+ Fix from $1,9502026-01-13 HIGH 8.8 CVE-2025-66177 There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on… Mitigation only Fix from $1,9502026-01-13 CRITICAL 9.8 CVE-2026-22213 RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability… Riot 2025.10+ Fix from $2,3002026-01-12 CRITICAL 9.8 CVE-2026-22214 RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds… Riot 2025.10+ Fix from $2,3002026-01-12 MEDIUM 6.8 CVE-2025-68622 Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implemen… Usb Host Uvc Class Driver 2.4.0+ Fix from $1,6002026-01-12 HIGH 8.8 CVE-2025-69195 A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-… Wget2 2.2.1+ Fix from $1,9502026-01-09 HIGH 8.6 CVE-2026-0719 A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication… Mitigation only Fix from $1,9502026-01-08 CRITICAL 9.8 CVE-2026-22189 The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounde… Panda3d after 1.10.16 Fix from $2,3002026-01-07 HIGH 7.5 CVE-2025-65805 OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-o… Oai Cn5g Amf after 2.1.9 Fix from $1,9502026-01-07 MEDIUM 6.5 CVE-2025-20794 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a … Nr15 Mitigation only Fix from $1,6002026-01-06 HIGH 7.8 CVE-2025-20797 In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,9502026-01-06