CVE-2021-41459

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41457

CVE-2021-41457 affects GPAC MP4Box 1.1.0 with a stack buffer overflow in nhmldmx_init_parsing (src/filters/dmx_nhml.c) that leads to denial of service. Multiple connected sources confirm GPAC/MP4Box exposure and provide remediation guidance. Debian advisory notes fixed delivery in GPAC 1.0.1+dfsg...

CVE-2021-41456

The vulnerability CVE-2021-41456 affects GPAC’s MP4Box (v1.0.1). The issue is a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1004 triggered by the szXmlTo parameter, leading to a denial of service. Connected references corroborate the GPAC context and CVE listing; Debi...

CVE-2021-41459

GPAC MP4Box (v1.0.1) contains a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1008 (szXmlFrom) leading to DoS. The issue is documented as CVE-2021-41459. Debian/DSA-5411 notes the fixed version for bullseye is gpac 1.0.1+dfsg1-4+deb11u2, indicating a package upgrade as ...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreSSL Stack Buffer Overflow Vulnerability

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

OSV-2021-1368 Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196 Crash type: Stack-buffer-overflow READ Crash state: dispatchprinterror internalexrparseheader exrstartread...

Microsoft Windows cmd.exe - Stack Buffer Overflow Vulnerability

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line interpreter for t...

Microsoft Windows cmd.exe - Stack Buffer Overflow

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Date: 15/09/2021 Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c, allowing an attacker to cause code Execution...

FAAD2 Stack Buffer Overflow Vulnerability (CNVD-2021-89950)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

GPAC Stack Buffer Overflow Vulnerability (CNVD-2021-82977)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

SWFTools Stack Buffer Overflow Vulnerability (CNVD-2021-73197)

SWFTools is a collection of utilities that work with Adobe Flash files SWF files. SWFTools has a stack buffer overflow vulnerability that can be exploited by attackers to cause code execution...

Security Bulletin: Vulnerability in kernel affects Power Hardware Management Console (CVE-2018-14633)

Summary Power Hardware Management Console is affected by security vulnerabilities in the Linux Kernel. Power Hardware Management Console has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-14633 DESCRIPTION: A security flaw was found in the chapservercomputemd5 function in the...

PDFTools stack buffer overflow vulnerability

PDFTools is a tool for converting PDF files to ePUB format. A stack buffer overflow vulnerability exists in the Analyze::AnalyzePages function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to execute code...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1300-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1300-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1303-1 Rating: important References: 1190096 1190476 Cross-References: CVE-2021-30606 CVE-2021-30607 CVE-2021-30608 CVE-2021-30609 CVE-2021-30610 CVE-2021-30611 CVE-2021-30612 CVE-2021-30613 CVE-2021-30614...

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. It contains a stack buffer overflow in the bezierspline function in genepic.c...

CVE-2021-39595

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfxalloc located in mem.c. It allows an attacker to cause code Execution...