CVE-2019-5436
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVSS
7.8
Alta
EPSS
49.7%
p99
KEV
—
Exploit Today
30
0-100
Publicado: 28 de mai. de 2019 · Última mod.: 14 de out. de 2026 · CWE-122 · CWE-787
49.7%EPSS · 30 dias49.7%
2026-10-112026-11-08
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/09/11/6
- curl.haxx.sehttps://curl.haxx.se/docs/CVE-2019-5436.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
- seclists.orghttps://seclists.org/bugtraq/2020/Feb/36
- security.gentoo.orghttps://security.gentoo.org/glsa/202003-29
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20190606-0004/
- support.f5.comhttps://support.f5.com/csp/article/K55133295
- support.f5.comhttps://support.f5.com/csp/article/K55133295?utm_source=f5support&%3Butm_medium=RSS
- www.debian.orghttps://www.debian.org/security/2020/dsa-4633
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/09/11/6
- curl.haxx.sehttps://curl.haxx.se/docs/CVE-2019-5436.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
- seclists.orghttps://seclists.org/bugtraq/2020/Feb/36
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-113364——
———Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed data size value in the protocol header.9hCVE-2026-1245609.8 CRÍ—
———A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.11hCVE-2026-1165018.4 ALT—
——0IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write caused by improper input validation when accessing a corrupted unitary matrix.12hCVE-2026-1236157.5 ALT45.2%
——14imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer. Unauthenticated remote attackers can supply a crafted ICO image to corrupt adjacent heap chunk metadata, triggering a glibc abort that crashes the worker.1dCVE-2026-1236149.8 CRÍ51.7%
——16imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vips/icoload.c, corrupting heap memory to crash the process or achieve code execution.1dCVE-2026-12396610.0 CRÍ63.7%
——19A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.2d