Vulnerabilities
CVSS 9.1: Authenticated HTTP Stack Overflow Enables RCE on TOTOLINK-X2000R Router Firmware
A stack-based buffer overflow in the batchupg feature of this router model permits arbitrary code execution via authenticated HTTP requests.
buffer overflow
Everything Firewall Scoop has reported about buffer overflow: 8 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.1: Critical Authenticated RCE in Totolink X2000R via boa pppoe Stack Overflow, No Patch Yet
Authenticated attackers can execute arbitrary code via stack-based buffer overflows in the Totolink X2000R web interface. No patch is currently available.
Vulnerabilities
CVSS 8.6: Authenticated attackers execute code on Advantech ADAM-3600 via long file paths
A stack-based buffer overflow in Advantech ADAM-3600 units prior to version 2.8.5.0 enables authenticated attackers to execute arbitrary code via long file paths.
Vulnerabilities
CVSS 9.9: MariaDB 10.6-13.0 GIS Flaw Enables Remote Code Execution via Nested Geometry
A critical flaw in MariaDB allows remote attackers to corrupt memory via crafted GIS objects, risking code execution in unpatched server versions.
Vulnerabilities
SQL Server Buffer Overflow Flaw Lets Authorized Users Escalate Privileges
A high-severity stack-based buffer overflow in SQL Server allows network-based privilege escalation for attackers who already have authorization.
Vulnerabilities
CVSS 9.8: Unauthenticated Windows Error Reporting Buffer Overflow Enables Remote Code Execution
Microsoft confirms a heap-based buffer overflow in Windows Error Reporting allows remote attackers to execute code without authentication.
Vulnerabilities
CVE-2026-85814: Critical Heap Overflow in Windows Media Foundation Allows Network-Based RCE
Microsoft confirms a heap-based buffer overflow in Windows Media Foundation enables remote code execution by unauthorized attackers via network access.
Vulnerabilities
What Causes a Buffer Overflow Vulnerability: The Memory Logic Breakdown
A buffer overflow occurs when code writes data beyond a memory block's boundary, corrupting adjacent instructions and allowing attackers to hijack execution flow.