PT-2023-12352 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions prior to 2.4.0 Description: The issue is related to a buffer overflow in the implementation of net buf add mem in the USB device Bluetooth class. Recommendations: For versions prior to 2.4.0, update to version 2.4.0 or later t...

PT-2022-27928 · Trendnet · Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the setbg num parameter in the icp setbg img sub 41DD68 function. This issue can be exploited, potentially allowing for unauthorized access or control...

PT-2022-27909 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.nslookup target parameter in the tools nslookup function. Recommendations: For TRENDnet TEW755AP version 1.13B01, avoid using the...

PT-2022-28023 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the wepkey parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using the wepkey parameter in the...

PT-2022-27631 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the rules parameter in the formIPMacBindAdd function. This issue affects the specified version of the IP-COM M50 device. Recommendations: For IP-COM M5...

PT-2022-27620 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered in the formSetNetCheckTools function via the hostname parameter. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to th...

PT-2022-27336 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: A stack overflow issue was discovered, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A18 version 15.13.07.09, avoid using...

PT-2022-36267 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to an overflow when iterating ATTR RECORDs in ntfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-36526 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to an overflow when iterating ATTR RECORDs in ntfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-27551 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the account parameter at the "/goform/addUserName" API endpoint. This issue affects the Tenda W30E device. Recommendations: For Tenda W30E version...

PT-2022-36122 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to an overflow when iterating ATTR RECORDs in ntfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-27584 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the deviceId parameter in the addWifiMacFilter function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: F...

ASB-A-253337348

The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow...

Stack overflow

TensorFlow is an open source platform for machine learning. When tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce. The fix will be included in TensorFlow 2.11. We will also cherrypick...

CVE-2022-41886 Overflow in `ImageProjectiveTransformV2` in Tensorflow

TensorFlow is an open source platform for machine learning. When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. We have patched the issue in GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba. The fix will be included in TensorFlow 2.11. We will also...

SUSE-SU-2022:4005-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hashupdate on long parameter bug81738 bsc1204577. - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont bug81739 bsc1204979. - version update to 8.0.25 27 Oct 2022 Session:...

SUSE-SU-2022:3931-1 Security update for git

This update for git fixes the following issues: - CVE-2022-39260: Fixed overflow in splitcmdline bsc1204456. - CVE-2022-39253: Fixed dereference issue with symbolic links via the --local clone mechanism bsc1204455...

PT-2022-26756 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the schedStartTime parameter in the setSchedWifi function. This issue can be exploited, potentially leading to unintended consequences. Recommendations:...

CVE-2022-44638

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory...

PT-2022-26753 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the list parameter in the formSetQosBand function. Recommendations: For Tenda AC23 version 16.03.07.45 cn, consider restricting access to the...