10805 matches found
quickjs:fuzz_regexp: Stack-buffer-overflow in lre_exec
Detailed Report: https://oss-fuzz.com/testcase?key=4848875434475520 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzregexp Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x750a686d1080 Crash State: lreexec fuzzregexp.c Sanitizer: address...
Rockwell Automation Arena Simulation Buffer Overflow
The vulnerability of the Rockwell Automation Arena Simulation software for simulating and automating discrete events is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created DOE files...
CVE-2025-68114
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
CVE-2025-14932
NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target mus...
Tenda WH450 security vulnerabilities
Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from an incorrect manipulation of the parameter Username in the file/goform/PPTPDClient of the component HTTP Request Handler, which could result in a stack...
NSF Unidata NetCDF-C security vulnerability
NSF Unidata NetCDF-C is a tool for processing NetCDF files from NSF Unidata, USA. A security vulnerability exists in NSF Unidata NetCDF-C that stems from a lack of validation of the length of user-supplied data when parsing attribute names, which could lead to a stack buffer overflow and remote...
CVE-2025-34457 wb2osz/direwolf <= 1.8.1 Stack-based Buffer Overflow DoS
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
ox-ruby:fuzz_parse: Dynamic-stack-buffer-overflow in _ox_err_set_with_location
Project: https://github.com/ohler55/ox.git Detailed Report: https://oss-fuzz.com/testcase?key=4988953897009152 Project: ox-ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasanox-ruby Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address:...
openthread:ip6-fuzzer: Stack-buffer-overflow in ot::Tlv::GetSize
Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4688966503956480 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...
NI LabVIEW security vulnerabilities
NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW version 2025 Q3 and prior versions that originates from a stack buffer overflow when parsing a corrupted VI file, which could lead to...
Tenda WH450 security vulnerabilities
Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from improper handling of the parameter ssidindex in the file /goform/onSSIDChange, which may result in a stack buffer overflow...
Siemens Solid Edge Buffer Overflow
The vulnerability of Siemens Solid Edge’s design and simulation tools is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created CFG format file...
AZL-74805 CVE-2025-68114 affecting package rust for versions less than 1.90.0-4
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
CVE-2025-68114
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
CVE-2025-68114: Buffer Underwrite
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a stack buffer overflow in OnAssocReq IE parsing in rtl8723bs...
TOTOLINK infostat.cgi cstecgi.cgi Code Execution
The vulnerability of the infostat.cgi and cstecgi.cgi microprogramming devices of the TOTOLINK A720R, LR1200GB, and NR1800X networks devices is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
TOTOLink A950RG getSaveConfig Code Execution
The vulnerability of the getSaveConfig function in the TOTOLink A950RG router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
CVE-2025-68255: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy length when copying into a fixed-size 16-byte stack...
