CVE-2026-102484Medium· 6.4▾ SunlitHeap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.
ntpsec < 1.2.6Upgrade to version 1.2.6
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102485Medium· 5.2Out-of-bounds Read in ntpsec
CVE-2026-102486High· 7.5Out-of-bounds Read in ntpsec
CVE-2026-102483High· 7.5Reachable Assertion in ntpsec
CVE-2025-15059High· 7.8GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-10136Critical· 9.1A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
CVE-2025-71436High· 7.1Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag