CVE-2021-37043

CVE-2021-37043 is a stack-based buffer overflow described for Huawei HarmonyOS smartphones. The vulnerability affects Huawei smartphones, where a malicious application could cause system resource exhaustion by exploiting the overflow. The available documents do not provide version-specific impact...

CVE-2021-37021

CVE-2021-37021 — Huawei HarmonyOS kernel stack-based buffer overflow is documented to potentially cause an out-of-bounds read. The vulnerability is described across multiple sources as affecting Huawei HarmonyOS (kernel module) with a stack-based overflow that can be exploited over network access...

CVE-2021-37020

CVE-2021-37020 describes a stack-based buffer overflow in Huawei HarmonyOS device software (Huawei Smartphone), affecting the Kernel module. The vulnerability can lead to an out-of-bounds read. Documented impact is based on public CVSS data (CVSS‑3.1: Network, Low attack complexity, Privileges Re...

CVE-2021-37014

CVE-2021-37014 is a stack-based buffer overflow in Huawei HarmonyOS Kernel module affecting Huawei devices. Exploitation can render the device unavailable, with CVSS indicating high availability impact. The linked sources describe the vulnerability across HarmonyOS smartphone deployments, but rem...

CVE-2021-37011

CVE-2021-37011 concerns Huawei HarmonyOS, with a stack-based buffer overflow in the Kernel module that can lead to an out-of-bounds read. The available documents describe the affected platform as HarmonyOS and the vulnerability class as a kernel stack overflow, but do not provide precise technica...

CVE-2021-37011

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read...

PT-2021-7570

Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.3.0 through 6.3.15 FortiWeb versions 6.4.0 through 6.4.1 Description The issue is related to multiple stack-based buffer overflows in the API controllers, which may allow an authenticated attacker to achieve arbitrary code...

CVE-2021-37014: Out-of-bounds Write

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to device cannot be used properly...

CVE-2021-37020: Out-of-bounds Write

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read...

Tencent WeChat WXAM Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

CVE-2021-37043: Improper Authentication

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources...

CVE-2021-37021: Out-of-bounds Write

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read...

CVE-2021-37011: Out-of-bounds Write

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read...

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-44352: Out-of-bounds Write

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18multi device via the list parameter in a post request in goform/SetIpMacBind...

RHEL 6 : dhcp (RHSA-2021:2419)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2419 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

PT-2021-5320

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft versions 1.01.30 and prior Description The issue is caused by a stack-based buffer overflow in the CNCSoft software, which may allow an attacker to execute arbitrary code. This can be exploited by a remote attacker...

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

The Bug Report November 2021 Edition

The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...