flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

ROPInjector

ROPInjector A tool written in C Win32 to convert any shellcode in ROP and patch it into a given portable executable PE. It supports only 32-bit target PEs and the x86 instruction set. Published in Blackhat USA 2015, "ROPInjector: Using Return Oriented Programming for Polymorphism and Antivirus...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

stegcrack

Stegcrack Stegcrack is an open-source program for exploiting a vulnerability in Steghide specifically CVE-2021-27211. Stegcrack detects whether a given file contains data hidden with Steghide, and can sometimes fully extract the hidden data, all with no password. Installation Clone this repositor...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace setup, and verifier analysis. For educational and security research purposes only. CVE-2021-3490 – eBPF Verifier...

CVE-2024-6387_PoC

Summary This is essentially a statistical vulnerability: a large number of attempts are required to win the race condition and successfully execute arbitrary code. Attackers need to overcome many obstacles, Schwartz told SecurityWeek. "Even in the best-case scenario, the most well-known...

CVE-2019-19012

CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a...

CVE-2026-116153

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116153

A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service DoS or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially crafted image requiring convex-hull calculations, an attacker ca...

EUVD-2026-109414

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116153 ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116153

Versions of ImageMagick prior to 7.1.2-33 are vulnerable to a heap buffer overflow on 32-bit systems. The vulnerability occurs when the software processes convex-hull calculations on crafted images, allowing an attacker to overwrite heap memory. This memory corruption can lead to application cras...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denial Of Services DoS Description In this bug, a crash is addressed which is manifested when we open two large size text files first.txt & second.txt as input to SumatraPDF 32 bit. Run the following command, or you can manually open the both files in...

same_type_object_reuse_exploits

PoC Same-Type/Same-Address Object Reuse Exploits PoC exploits developed by Mathias Krause associated with the blog at https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...

libsafe-CVE-2005-1125

Libsafe only works on 32-bit architectures 1. make build: Builds Libsafe, compiles the proof of concept exploit 'thread', and compiles the library interposition code 'interpose.so'. make random MAXDELAY=x: Randomizes the interposed delays in 'interpose.so' with miximum delay MAXDELAY per...

WAMpage

WAMpage WAMpage - A WebOS root LPE exploit chain CVE-2022-23731 This exploit is mainly of interest to other researchers - if you just want to root your TV, you probably want RootMyTV, which offers a reliable 1-click persistent root. Currently only supports WebOS 4.x on 32-bit SoCs. This software ...

CVE-2024-6387

0.Summary This is essentially a statistical vulnerability: it requires a large number of attempts to win the race condition and successfully execute arbitrary code, and the attacker needs to overcome many obstacles," Schwartz told SecurityWeek. "Even in the best case, the most famous vulnerabilit...

CVE-2019-19012

Integer overflow in Oniguruma An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can...