20240 matches found
Out-of-bounds Write
Open Asset Import Library aka assimp has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...
CVE-2021-45932
CVE-2021-45932 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow of 4 bytes occurs in MqttDecode_Publish (invoked via MqttClient_DecodePacket and MqttClient_HandlePacket). Reported impact per NVD indicates partial availability impact; exploitation status is not documented in the provided...
CVE-2021-45932
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 4 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...
CVE-2021-45933
The vulnerability CVE-2021-45933 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow (8 bytes) occurs in MqttDecode_Publish, called from MqttClient_DecodePacket and MqttClient_HandlePacket. The root cause is improper memory boundary handling in that function. The impact is not elaborated b...
CVE-2021-45933
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45935
Summary: CVE-2021-45935 affects Grok 9.5.0 and involves a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (invoked via std::__1::__packaged_task_func and related bindings). Impact (as per sources): NVD indicates a base score of 4.3 (MEDIUM) under CVSS v2, and 5.5 (MEDIUM) under C...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45936
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecodeDisconnect called from MqttClientDecodePacket and MqttClientWaitType...
CVE-2021-45937
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...
CVE-2021-45937
wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...
CVE-2021-45939
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...
CVE-2021-45939
The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...
CVE-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
CVE-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
CVE-2021-45941
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
CVE-2021-45949
Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...
CVE-2021-45951
Dnsmasq 2.86 has a heap-based buffer overflow in checkbadaddress called from checkforboguswildcard and FuzzCheckForBogusWildcard. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...
CVE-2021-45952
CVE-2021-45952 affects dnsmasq 2.86 with a heap-based buffer overflow in dhcp_reply (triggered via dhcp_packet/FuzzDhcp). Public references confirm this family includes related CVEs and vendor remarks that 45951–45957 may not represent real vulnerabilities. For mitigation, some sources (CBLMARINE...