Skip to content
OpenAdvisories

Archive

13 September 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-90781 Public exploit

    alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

    alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier…

  • Medium 5.3
    CVE-2026-90782 Public exploit

    S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

    S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can …