libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server...

PYSEC-2025-173

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software allows a hacker to execute arbitrary code.

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software lies in the reading of data beyond the buffer boundaries in memory during the processing of the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a special...

CVE-2023-53154

parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...

AZL-67455 CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1

parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...

AZL-62005 CVE-2023-53154 affecting package apparmor for versions less than 3.0.4-5

parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...

UBUNTU-CVE-2023-53154

parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...

CVE-2023-22297

Access of memory location after end of buffer in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...

CVE-2023-0817

Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV...

CVE-2022-40518

Information disclosure due to buffer overread in Core...

cJSON 缓冲区错误漏洞

cJSON is a lightweight open source JSON parser from the individual developer Dave Gamble. A buffer error vulnerability exists in cJSON versions prior to 1.7.18, which stems from a heap buffer over-read in the parsestring function...

The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software allows a intruder to trigger a service failure.

The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the get_parentControl_list_Info function in the Tenda AC8V4 router microprogramming software allows a attacker to execute arbitrary code through a specially created parameter called deviceid.

The vulnerability of the getparentControllistInfo function in the Tenda AC8V4 router microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created deviceid paramete...

The vulnerability of the downloadFile.cgi function in the microprogramming software for the Totolink-A800R router allows a hacker to execute arbitrary code.

The vulnerability of the downloadFile.cgi function in the Totolink-A800R router microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-40519

Information disclosure due to buffer overread in Core...

CVE-2022-1907

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...

CVE-2022-40524

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

CVE-2021-46611

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-31430

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...