Vulnerability index

Browse CVEs

2,635 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Heap-based Buffer OverflowCWE-122 × clear
Unclassified MEDIUM 6.9
CVE-2026-21399

Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within…

No fix yet
Fix from $4,000 2026-08-11
Unclassified HIGH 8.5
CVE-2026-73072

Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left…

No fix yet
Fix from $4,900 2026-08-11
Unclassified HIGH 7.5
CVE-2026-72745

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos_DecryptMessage() (winpr/libwinpr/sspi/Kerberos/kerberos.c). The 16-bit EC (…

No fix yet
Fix from $4,900 2026-08-11
Unclassified MEDIUM 5.3
CVE-2026-19259

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReferen…

No fix yet
Fix from $1,600 2026-08-08
Unclassified HIGH 7.1
CVE-2026-18497

A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. T…

No fix yet
Fix from $1,950 2026-08-07
Unclassified MEDIUM 5.3
CVE-2026-19206

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sam…

No fix yet
Fix from $1,600 2026-08-07
Unclassified MEDIUM 6.2
CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerabil…

No fix yet
Fix from $1,600 2026-08-07
Unclassified HIGH 7.8
CVE-2026-70638

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multi…

No fix yet
Fix from $1,950 2026-08-06
Chrome HIGH 7.5
CVE-2026-19156

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to po…

Fix: 151.0.7922.109+
Fix from $1,950 2026-08-06
Chrome HIGH 8.3
CVE-2026-19138

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to…

Fix: 151.0.7922.109+
Fix from $1,950 2026-08-06
Apr Util HIGH 7.5
CVE-2026-34501

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1…

Fix: 1.6.4+
Fix from $1,950 2026-08-06
Apr Util HIGH 7.5
CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: fro…

Fix: after 1.6.3
Fix from $1,950 2026-08-06
Unclassified CRITICAL 9.8
CVE-2026-67873

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encod…

No fix yet
Fix from $2,300 2026-08-06
Unclassified HIGH 7.5
CVE-2026-67867

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when pro…

No fix yet
Fix from $1,950 2026-08-05
Unclassified HIGH 7.5
CVE-2026-67860

open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backe…

No fix yet
Fix from $1,950 2026-08-04
Unclassified CRITICAL 9.8
CVE-2017-20241

Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted pac…

No fix yet
Fix from $2,300 2026-08-04
Unclassified MEDIUM 5.3
CVE-2026-18784

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_cli…

No fix yet
Fix from $1,600 2026-08-04
Zephyr HIGH 7.5
CVE-2026-10849

The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in res…

Fix: 4.5.0+
Fix from $1,950 2026-08-03
Unclassified MEDIUM 5.5
CVE-2026-20480

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution p…

No fix yet
Fix from $1,600 2026-08-03
Unclassified HIGH 8.1
CVE-2026-20465

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of…

No fix yet
Fix from $1,950 2026-08-03
Unclassified HIGH 7.5
CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL …

No fix yet
Fix from $1,950 2026-08-02
Unclassified CRITICAL 9.4
CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONT…

No fix yet
Fix from $2,300 2026-08-01
Unclassified HIGH 7.1
CVE-2026-54715

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, pa…

No fix yet
Fix from $1,950 2026-07-30
Unclassified CRITICAL 9.8
CVE-2026-51272

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the latinToUTF8() character encoding conversion function. …

No fix yet
Fix from $2,300 2026-07-30
Chrome HIGH 8.8
CVE-2026-17951

Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafte…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 8.8
CVE-2026-17935

Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17758

Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted …

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17680

Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process …

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Unclassified MEDIUM 6.8
CVE-2026-13307

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present a…

No fix yet
Fix from $1,600 2026-07-29
7 Zip HIGH 7.8
CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar…

Fix: 26.02+
Fix from $1,950 2026-07-29