#Buffer Overflow
All CosmicBytez Labs articles tagged #Buffer Overflow, across news, security advisories, how-to guides, and projects.
- News
Fortra Patches Critical Vulnerabilities in BoKS
Fortra fixed 8 BoKS flaws, including a 9.9 CVSS AD auth bypass, 9.1 root command injection, and 9.8 remote buffer overflow bug.
- Security
CVE-2026-94952: Critical Unauthenticated Stack Overflow in TOTOLINK N150RT Routers
CVSS 9.8 unauthenticated stack overflow in TOTOLINK N150RT's formPortFw handler risks remote crash or code execution; no patch exists for this EOL router.
- Security
Critical Stack Overflow in FAST FAC1200R Routers Has Public Exploit
CVE-2026-101037 lets remote attackers crash or hijack FAST FAC1200R routers via the devdiscover service; a public exploit exists and no patch is available.
- Security
CVE-2026-101074: Netcore NR289-GE Pre-Authentication Stack Buffer Overflow
A critical pre-auth stack buffer overflow in Netcore NR289-GE routers lets remote attackers crash the device or potentially achieve RCE.
- Security
D-Link DIR-895L L2TP Parser Out-of-Bounds Write (CVE-2026-100740)
A CVSS 9.9 pre-auth out-of-bounds write in D-Link DIR-895L's L2TP control-channel parser has a public PoC and no vendor patch.
- Security
CVE-2026-96257: Critical Stack-Based Buffer Overflow in Fast FAC1203R Gigabit Edition Routers
Critical CVSS 10 stack overflow in Fast FAC1203R Gigabit Edition routers is remotely exploitable pre-auth; public PoC exploit code is available.
- Security
CVE-2016-15059 — Heap Buffer Overflow in Net::IDN::Punycode's XS Encoder
A decade-old heap overflow in Perl's Net::IDN::Punycode (encode_punycode, fixed in 2.301) was just scored CVSS 9.8 in NVD.
- Security
CVE-2026-7273: Zyxel GS1900 Switches Stack Buffer Overflow Now Actively Exploited
CISA added this unauthenticated LAN RCE flaw in Zyxel GS1900 switches to its KEV catalog after confirming active exploitation.
- Security
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Heap-based buffer overflow in F5 BIG-IP APM (OAuth + access policy) allows unauthenticated RCE; added to CISA KEV as actively exploited.
- Security
CVE-2026-94003: Perfect-10 Stack Buffer Overflow in Comfast CF-N1-S Routers
Comfast CF-N1-S 2.6.0.1's mbox-config CGI handler allows unauthenticated, network-based stack buffer overflow scoring a maximum CVSS 10.0.
- Security
CVE-2026-94089: Critical Unauthenticated Stack Overflow in D-Link DIR-868L Routers
A CVSS 10 stack-based buffer overflow in D-Link DIR-868L's authentication CGI lets unauthenticated remote attackers achieve full router compromise.
- Security
CVE-2026-94100: Buffer Overflow in Netcore NBR200V2 WAN VLAN Reconfiguration
A buffer overflow in Netcore NBR200V2's routerd WAN VLAN handler can be triggered remotely via the vlan_wanX.ports argument.
- News
New Check Point Flaw Lets Hackers Execute Code With Root Privileges
An unauthenticated stack overflow in Check Point's Security Management Server login process allows root-level remote code execution. CVSS 9.8.
- Security
Totolink A3002MU Router Buffer Overflow Enables Remote Attacks
CVE-2026-93741 (CVSS 10) lets remote attackers overflow a buffer in the Totolink A3002MU's web admin interface. Public exploit code, no patch yet.
- Security
Critical Stack Overflow in D-Link DIR-823G Routers (CVE-2026-90680)
An unauthenticated stack-based buffer overflow (CVSS 9.9) in D-Link DIR-823G's HNAP1 interface allows remote attackers to corrupt memory...
- Security
Critical Stack Buffer Overflow in sngrep's SIP Header Parser
CVE-2026-90558 (CVSS 9.8) lets attackers crash or potentially hijack sngrep via oversized SIP Call-ID and X-Call-ID headers.
- Security
Tenda HG10 Routers Hit By Critical Unauthenticated Buffer Overflow
A critical buffer overflow in Tenda HG10 firmware's formURL function allows remote memory corruption with a public exploit and no patch yet.
- Security
FreeIPMI Stack Buffer Overflow Threatens Server BMC Management Tooling
CVE-2026-85504 is a critical stack-based buffer overflow in FreeIPMI's Fujitsu SEL parsing, triggered by malformed BMC responses. Fixed in 1.6.19.
- Security
CVE-2026-73600: Dell PowerProtect Data Manager Stack Buffer Overflow
A stack buffer overflow in Dell PowerProtect Data Manager's file-level restore agent lets a high-privileged attacker trigger information disclosure.
- Security
Critical Unauthenticated Buffer Overflow in Tenda HG10 Routers
CVE-2026-82542 (CVSS 10) lets remote attackers trigger a buffer overflow in Tenda HG10 routers via the formIPv6Routing handler. Public exploit exists.
- Security
D-Link DIR-825M Disk-Format Stack Overflow (CVE-2026-82592)
CVE-2026-82592 is a critical, unauthenticated stack overflow in D-Link DIR-825M's disk-formatting endpoint, with a public exploit available.
- Security
D-Link DIR-825M LTE Upgrade Stack Overflow (CVE-2026-82593)
CVE-2026-82593 is a critical, unauthenticated stack overflow in D-Link DIR-825M's LTE firmware-upgrade handler, with a public exploit available.
- Security
Critical OCPP Stack Buffer Overflow in EV Charging RTOS Clients
CVE-2026-13214 is a CVSS 9.8 stack buffer overflow in OCPP 1.6 parse_getconfig_msg() allowing unauthenticated RCE on EV charging station firmware.
- Security
CVE-2026-77946: TRENDnet TEW-821DAP Critical Stack Buffer Overflow
CVSS 10.0 RCE flaw in TRENDnet TEW-821DAP firmware lets attackers exploit NTP config with no patch available.
- Security
CVE-2026-78050: Critical Stack Buffer Overflow in Comfast CF-N1-S Router
CVSS 9.9 stack overflow in Comfast CF-N1-S 2.6.0.1 NTP timezone endpoint enables unauthenticated remote code execution.
- Security
CVE-2026-76003: Critical Stack Buffer Overflow in UTT HiPER 1200GW
A remotely exploitable stack-based buffer overflow (CVSS 9.9) in UTT HiPER 1200GW routers up to v2.5.3 allows attackers to execute arbitrary code.
- Security
CVE-2026-76004: Critical Stack Buffer Overflow in UTT HiPER 1250GW HTTP Handler
CVSS 9.9 stack buffer overflow in UTT HiPER 1250GW up to v3.2.7 via the pvid parameter in the HTTP handler enables unauthenticated remote code execution.
- Security
CVE-2026-19959: Edimax EW-7478APC Critical Stack-Based Buffer Overflow
Critical stack overflow in Edimax EW-7478APC 1.04 allows RCE via pppUserName parameter. No patch available; vendor has not responded to disclosure.
- Security
CVE-2026-19961: Critical Buffer Overflow in Edimax EW-7478APC Wireless Router
A CVSS 9.9 buffer overflow in the Edimax EW-7478APC 1.04 allows unauthenticated remote code execution via the formWlSiteSurvey endpoint.
- Security
CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)
Critical CVSS 9.8 buffer overflow in the MongoDB BI Connector ODBC Driver may allow remote code execution via long metadata names.
- Security
CVE-2026-45538: OpenSIPS Stack Buffer Overflow via Oversized SIP Header
A critical stack buffer overflow in OpenSIPS versions 4.0.0 and prior allows remote code execution by sending a SIP message with a header name exceeding...
- Security
CVE-2026-68579: FreeRDP Heap Buffer Overflow in Windows Clipboard Client
A critical heap-based buffer overflow in FreeRDP's Windows clipboard client allows an OLE paste consumer to trigger memory corruption, scoring CVSS 9.6....
- Security
CVE-2026-51380: Tenda AC10 v3 Buffer Overflow Enables DoS and Remote Code Execution
A critical CVSS 9.8 buffer overflow vulnerability in Tenda AC10 v3 firmware V03.03.16.09 allows remote attackers to cause permanent denial of service or...
- Security
GeoVision LPC Camera Critical RCE via thttpd Buffer Overflow (CVE-2026-57878)
A critical unauthenticated stack-based buffer overflow in thttpd on GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote attackers to execute...
- Security
GeoVision LPC Camera Critical RCE via ssvr RTSP Auth Buffer Overflow (CVE-2026-57879)
A critical unauthenticated stack-based buffer overflow in the ssvr RTSP service of GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote attackers to...
- Security
GeoVision LPC Camera Critical RCE via ssvr RTSP Digest Auth Buffer Overflow (CVE-2026-57880)
A critical unauthenticated stack-based buffer overflow in GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote code execution by exploiting...
- Security
GeoVision LPC Camera Critical RCE via vlsvr Remote Login Buffer Overflow (CVE-2026-57881)
A critical unauthenticated stack-based buffer overflow in the vlsvr daemon of GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote code execution...
- Security
CVE-2026-12485: GeoVision GV-I/O Box 4E UDP Stack Overflow (IP Address Field)
A critical CVSS 10.0 stack-based buffer overflow in the GeoVision GV-I/O Box 4E DVRSearch service allows unauthenticated remote attackers to achieve...
- Security
CVE-2026-12846: GeoVision GV-I/O Box 4E UDP Stack Overflow (Net Mask Field)
A second critical CVSS 10.0 stack-based buffer overflow in GeoVision GV-I/O Box 4E firmware 2.09 — this time in the Net Mask field handling of the...
- News
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A stack-based buffer overflow flaw in HP OfficeConnect VoIP phones can be exploited remotely to achieve code execution, potentially allowing attackers to…
- Security
CVE-2018-25427: Arm Whois 3.11 Stack-Based Buffer Overflow RCE
A critical stack-based buffer overflow vulnerability in Arm Whois 3.11 (CVSS 9.8) allows remote attackers to execute arbitrary code by supplying oversized…
- Security
CVE-2025-12686: Synology BeeStation OS Critical Buffer Overflow RCE
Buffer overflow in Synology BeeStation OS AdminCenter lets unauthenticated attackers execute code remotely (CVSS 9.8) — patch to 1.3.2-65648 now.
- Security
Critical Stack-Based Buffer Overflow in Totolink NR1800X
A critical CVSS 9.8 stack-based buffer overflow in the Totolink NR1800X router's lighttpd component allows unauthenticated remote code execution via a...
- Security
CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels
A critical out-of-bounds write in SAIL's PSD codec occurs when the pixel buffer is allocated using a raw header formula that doesn't account for actual...
- Security
CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig
A critical CVSS 9.8 buffer overflow in TOTOlink A3600R v5.9c.4959 allows remote attackers to exploit the rootSsid parameter in the setAppEasyWizardConfig...
- Security
CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer
JAD 1.5.8e-1kali1 and prior contains a critical stack-based buffer overflow vulnerability allowing attackers to execute arbitrary code by supplying input...
- Security
CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer
TiEmu 2.08 and prior contains a critical stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by passing oversized...
- Security
Tenda A15 UploadCfg Stack Buffer Overflow (CVE-2026-4567)
A CVSS 9.8 Critical stack-based buffer overflow in Tenda A15 firmware 15.13.07.13 allows unauthenticated remote attackers to execute arbitrary code by...
- Security
D-Link DHP-1320 SOAP Handler Stack Buffer Overflow
A CVSS 8.8 stack-based buffer overflow in D-Link DHP-1320 firmware 1.00WWB04 allows unauthenticated remote attackers to execute arbitrary code via a...
- Security
Critical Stack-Based Buffer Overflow in Delta Electronics
A critical CVSS 9.8 stack-based buffer overflow in Delta Electronics COMMGR2 allows unauthenticated remote code execution, posing severe risk to...
- Security
Critical Grandstream VoIP Vulnerability Allows
A critical CVSS 9.3 stack-based buffer overflow in Grandstream GXP1600 series VoIP phones allows unauthenticated remote code execution, enabling attackers...