Information disclosure

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

The CVE-2021-21722 entry concerns a ZTE ZXV10 B860A Smart Set-Top Box information disclosure vulnerability. According to the sources, the issue arises because the device does not fully verify logs, enabling attackers to obtain sensitive user information for follow-on activity. Affected firmware/v...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722: Insertion of Sensitive Information into Log File

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

stb-linz.de Cross Site Scripting vulnerability OBB-1434377

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__compute_transparency16

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=6193806570684416 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__expand_png_palette

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4908103769522176 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5114711032201216 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x602000000091 Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5720549589516288 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62a000005fcf...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_huff_decode

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=6243539368542208 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5108509686628352 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Index-out-of-bounds in stbi__build_huffman

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4911634777899008 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerubsanstb Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__paeth

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5762719665094656 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__create_png_image_raw

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5181841310220288 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb heap buffer overflow vulnerability

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufpeek8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

stb heap buffer overflow vulnerability (CNVD-2020-04061)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttfindtable in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

stb assertion failure vulnerability

stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffgetindex in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

stb heap buffer overflow vulnerability (CNVD-2020-04059)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufget8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

stb assertion failure vulnerability (CNVD-2020-04055)

stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffint in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...