CVE-2026-67873
A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegm
CVSS
9.8
Crítico
EPSS
0.4%
p34
KEV
—
Exploit Today
10
0-100
Publicado: 6 ago 2026 · Última mod.: 31 ago 2026 · CWE-122
0.4%EPSS · 30 días0.4%
2026-08-252026-09-22
A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data
- github.comhttps://github.com/mz-automation/lib60870
- github.comhttps://github.com/mz-automation/lib60870/blob/master/user_guide.adoc
- github.comhttps://github.com/mz-automation/lib60870/issues/201
- github.comhttps://github.com/mz-automation/lib60870/releases/tag/v2.4.0
- github.comhttps://github.com/mz-automation/lib60870/issues/201
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-756657.8 ALT—
——0Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.1hCVE-2026-756497.8 ALT—
——0Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.1hCVE-2026-18457——
——0Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.3 before 5.2.*.19hCVE-2026-941279.8 CRÍ—
KEV—50F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability10hCVE-2016-150599.8 CRÍ6.8%
——2Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode.
The XS backend builds the encoded label in the string buffer of the scalar it returns, sized from the input length. The loop that emits the digits of each code point checks for room before every write, but the write of the last digit of each round and the write of the terminating NUL do not, so an input whose encoded form fills the buffer writes past its end.
Only the XS backend is affected.
Encoding an attacker-supplied string corrupts the heap.20hCVE-2026-944248.8 ALT3.5%
——1A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.20h