CVE WatchJul 14, 2026

CVE-2026-23747

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The go

CVSS

3.7

Low

EPSS

0.3%

p22

KEV

—

Exploit Today

0-100

Published: Feb 26, 2026 · Last modified: Jul 14, 2026 · CWE-121

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-08-112026-09-07

Technical description

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_int() and golioth_payload_as_float() helpers copy network-supplied payload data into fixed-size stack buffers using memcpy() with a length derived from payload_size. The only length checks are guarded by assert(); in release builds, the asserts are compiled out and memcpy() may copy an unbounded payload_size. Payloads larger than 12 bytes (int) or 32 bytes (float) can overflow the stack, resulting in a crash/denial of service. This is reachable via LightDB State on_payload with a malicious server or MITM.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-85384—

—

———A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger the overflow, leading to remote code execution. Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration and network behavior, or disruption of device availability.10h CVE-2026-92163.5 LOW

—

———An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.10h CVE-2026-839907.8 HIG

—

———Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.11h CVE-2026-819537.8 HIG

—

———Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.10h CVE-2026-813967.8 HIG

—

———Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.10h CVE-2026-813887.8 HIG

—

———Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.10h