#Heap Overflow
All CosmicBytez Labs articles tagged #Heap Overflow, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-107908: Unauthenticated Heap Overflow in FalkorDB's Bolt Protocol
An unauthenticated attacker can corrupt heap memory in FalkorDB's experimental Bolt endpoint via a crafted RESET message, risking RCE.
- Security
CVE-2026-107909: Heap Out-of-Bounds Write in FalkorDB's WebSocket Bolt Transport
A crafted WebSocket frame with an oversized payload length corrupts heap memory in FalkorDB's Bolt endpoint, risking DoS and RCE.
- Security
CVE-2016-15059 — Heap Buffer Overflow in Net::IDN::Punycode's XS Encoder
A decade-old heap overflow in Perl's Net::IDN::Punycode (encode_punycode, fixed in 2.301) was just scored CVSS 9.8 in NVD.
- Security
CVE-2026-39919: Ghostscript JPEG 2000 Heap Buffer Overflow
Ghostscript before 10.08.0 has a critical heap overflow in its JPEG 2000 decoder, triggered by a crafted PDF; update to 10.08.0 now.
- Security
CVE-2026-44950: Critical Heap Overflow in libXfont2 Font Server Client
A missing cumulative bounds check in libXfont2's fs_read_glyphs() lets a malicious font server smash the heap via overlapping glyph writes.
- Security
CVE-2026-8507: Crypt::OpenSSL::PKCS12 Heap OOB Write — CVSS
A critical heap out-of-bounds write vulnerability in Crypt::OpenSSL::PKCS12 for Perl (versions through 1.94) can be triggered by parsing a malformed...
- News
18-Year-Old NGINX Rewrite Module Flaw Enables
Researchers have disclosed multiple critical vulnerabilities in NGINX Plus and NGINX Open Source, including a heap buffer overflow in...
- Security
CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS
A critical heap buffer overflow in the SAIL image library's XWD codec arises from a mismatch between pixel depth and bits-per-pixel, enabling arbitrary...
- Security
CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric
A critical heap write-past-end vulnerability in SAIL's TGA codec RLE decoder stems from an asymmetric bounds check that correctly validates run-packets...
- Security
CVE-2026-4177: YAML::Syck Heap Buffer Overflow Enables
A critical heap buffer overflow in YAML::Syck for Perl allows remote code execution through crafted YAML input that exceeds the 512-byte class name...
- Security
Fortinet FortiOS SSL VPN Heap Overflow Enables Pre-Auth RCE
Fortinet patches a critical heap-based buffer overflow in FortiOS SSL VPN that allows unauthenticated remote code execution on FortiGate appliances....