LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)

The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...

CVE-2026-55731

Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...

CVE-2024-34075

kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a...

CVE-2024-34075 kurwov vulnerable to Denial of Service due to improper data sanitization

kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a...

CVE-2024-34075: Deserialization of Untrusted Data

kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a...

PT-2024-25686 · Kurwov · Kurwov

Name of the Vulnerable Software and Affected Versions: kurwov versions prior to 3.2.5 Description: The issue arises from an unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose. This allows a maliciously crafted string on the dataset to...

SUSE CVE-2012-6151

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service crash or infinite loop, CPU consumption, and hang by causing the AgentX subagent to timeout...

OSV-2020-2247 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28315 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize ot::MeshCoP::ChannelMaskEntryBase::GetNext ot::MeshCoP::ChannelMaskBaseTlv::IsValid...

PT-2020-22178

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. Technical details include the crash type and state, which involve functions such as GetEntrySiz...

OSV-2020-1292 Stack-buffer-overflow in ot::ExtendedTlv::GetLength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20775 Crash type: Stack-buffer-overflow READ 2 Crash state: ot::ExtendedTlv::GetLength ot::Tlv::GetSize ot::Tlv::GetNext...

PT-2020-21811

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of the GetLength, GetSize, and GetNext functions within t...

OSV-2020-643 UNKNOWN READ in ot::Ip6::UdpSocket::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13405 Crash type: UNKNOWN READ Crash state: ot::Ip6::UdpSocket::GetNext ot::Ip6::Udp::AddSocket ot::Ip6::UdpSocket::Open...

OSV-2020-413 Stack-buffer-overflow in ot::NetworkData::NetworkDataTlv::GetNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14401 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::NetworkData::NetworkDataTlv::GetNext ot::NetworkData::Leader::IsStableUpdated ot::NetworkData::Leader::RegisterNetworkData...

PT-2020-22269

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including Ip6::NetifUnicastAddress::GetNext,...

PT-2020-22339

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including MessageQueue::GetTail, Message::GetNext, and...

PT-2020-22308

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the GetNext function in NetworkDataTlv, IsStableUpdat...

PT-2020-22449

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving the Ip6::UdpSocket::GetNext, Ip6::Udp::AddSocket, and Ip6::UdpSocket::Op...

Denial Of Service (DoS)

net-snmp is vulnerable to denial of service. This is due to a lack of validation for active requests queued when the subagent disconnects from the snmpd, which leads to an infinite loop or crash occurs when AgentX registers to handle an MIB and processes GETNEXT requests...

Denial Of Service (DoS)

libnetsnmp.so is vulnerable to denial of service DoS attacks. A malicious user can pass a GetNext PDU with multiple Varbinds to the application, causing a NULL Pointer Exception that can crash the application...

Memory Corruption Vulnerability in NA-VIEW

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...