Tag: heap buffer overflow
5 articles
NGINX Vulnerability Exposes Servers to Remote Code Execution Risks
A critical nginx vulnerability, CVE-2026-42533, allows remote attackers to trigger a heap buffer overflow with crafted HTTP requests, putting servers at risk of remote code execution - and it's not just a Denial of Service (DoS) threat, even on default systems. This flaw in nginx's script engine can be exploited with a specially designed request, making it a serious concern for server administrators.
FFmpeg Patch Disrupts PixelSmash Flaw in Video Decoder
Security researchers at JFrog have uncovered a high-severity flaw, CVE-2026-8461, in FFmpeg's MagicYUV decoder that can be exploited by malicious video files, posing a risk to any application using the library. This vulnerability, scoring 8.8, can be triggered by specially crafted AVI, MKV, or MOV files.
NGINX Flaw CVE-2026-42945 Actively Exploited, Threatens Worker Crashes and RCE
A newly discovered NGINX flaw, CVE-2026-42945, is being actively exploited, posing a significant threat of worker crashes and remote code execution (RCE) through specially crafted HTTP requests. This high-severity vulnerability, with a CVSS score of 9.2, has been lurking in NGINX versions since 2008, affecting NGINX Plus and NGINX Open.
NGINX Vulnerability Exposes Servers to DoS, Potential Code Execution
A critical vulnerability, CVE-2026-42945, has been lurking in NGINX's code for 18 years, exposing servers to potential DoS attacks and code execution - and affecting a staggering third of the top-ranked websites. This heap buffer overflow flaw, rated 9.2 in severity, is a wake-up call for NGINX users to take immediate action.
NGINX Flaw Enables Unauthenticated Remote Code Execution
A critical 18-year-old vulnerability, known as NGINX Rift, has been discovered in NGINX Plus and NGINX Open Source, allowing unauthenticated attackers to remotely execute code with a single crafted HTTP request. This high-severity flaw, rated 9.2 on the CVSS v4 scale, poses a significant threat to vulnerable servers.