Tagged articles

heap overflow

7 articles · Page 1 of 1
Black & White Path
Black & White Path
Jul 20, 2026 · Information Security

A 15‑Year‑Old NGINX Map Regex RCE Flaw (CVE‑2026‑42533): Deep Technical Breakdown

A severe remote‑code‑execution vulnerability (CVE‑2026‑42533) in NGINX’s map‑regex handling, present since 2011, lets an attacker trigger a heap overflow and bypass ASLR with a single crafted HTTP request, affecting dozens of directives across both HTTP and Stream modules, and the article details the underlying two‑pass evaluation flaw, exploitation steps, impact assessment, and remediation guidance.

ASLR bypassCVE-2026-42533Nginx
0 likes · 12 min read
A 15‑Year‑Old NGINX Map Regex RCE Flaw (CVE‑2026‑42533): Deep Technical Breakdown
Su San Talks Tech
Su San Talks Tech
May 17, 2026 · Information Security

Nginx’s 18‑Year‑Old RCE Flaw Exposes One‑Third of Websites

A critical Nginx vulnerability (CVE‑2026‑42945, CVSS 9.2) discovered by depthfirst and F5 allows unauthenticated remote code execution via a single crafted HTTP request, affecting versions 0.6.27‑1.30.0 and roughly one‑third of global websites.

CVE-2026-42945NginxRCE
0 likes · 11 min read
Nginx’s 18‑Year‑Old RCE Flaw Exposes One‑Third of Websites
OPPO Amber Lab
OPPO Amber Lab
Nov 29, 2024 · Information Security

5 Real Android Native Memory Bugs: Heap Overflows, UAF, and Fixes

This article reviews five high‑severity Android native vulnerabilities, detailing how missing length checks, unsigned integer wrap‑around, thread‑lifecycle misuse, unlocked vectors, and out‑of‑scope pointers lead to heap overflows or use‑after‑free bugs, and presents the remediation steps recommended by Google.

AndroidMemory VulnerabilitiesNative
0 likes · 12 min read
5 Real Android Native Memory Bugs: Heap Overflows, UAF, and Fixes
ITPUB
ITPUB
Jun 23, 2016 · Information Security

How glibc’s Unlink Mechanism Enables Heap Overflow Exploits (And Why It’s Now Defended)

This article explains the fundamentals of glibc malloc’s unlink mechanism, demonstrates how a heap overflow can be leveraged to overwrite chunk headers and execute arbitrary code, walks through the exploitation steps with code examples, and discusses modern mitigations that render the classic unlink technique ineffective.

glibc mallocheap overflowmemory corruption
0 likes · 15 min read
How glibc’s Unlink Mechanism Enables Heap Overflow Exploits (And Why It’s Now Defended)