CVE-2025-51089
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` lea
CVSS
6.5
Medium
EPSS
9.0%
p95
KEV
—
Exploit Today
29
0-100
Published: Jul 24, 2025 · Last modified: Jul 5, 2026 · CWE-122
6.8%EPSS · 30 days9.0%
2026-10-012026-10-28
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-95367.5 HIG—
———A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.6hCVE-2026-961998.8 HIG—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.9hCVE-2026-961988.8 HIG—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.9hCVE-2026-858978.8 HIG—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.9hCVE-2026-1191243.3 LOW—
———ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.9hCVE-2026-935365.3 MED—
——0A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.10h