Lucene search
+L

10720 matches found

osv_ubuntu
osv_ubuntu
•added 2025/04/16 3:16 p.m.•10 views

UBUNTU-CVE-2025-22082

In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the buffer in iiobackenddebugfswritereg before passing it to sscanf. It is a stack variable so we should not assume it will 0 initialized...

5.5CVSS6.3AI score0.00201EPSS
SaveExploits0References10
CVE
CVE
•added 2025/04/16 2:12 p.m.•128 views

CVE-2025-22082

CVE-2025-22082 affects the Linux kernel IIO subsystem: iio_backend_debugfs_write_reg() could pass an uninitialized stack buffer to sscanf() due to missing NULL termination. The root cause is a stack buffer not guaranteed to be 0-initialized, leading to potential uncontrolled reads. The vulnerabil...

5.5CVSS6.7AI score0.00201EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2025/04/16 2:12 p.m.•12 views

CVE-2025-22082 iio: backend: make sure to NULL terminate stack buffer

In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the buffer in iiobackenddebugfswritereg before passing it to sscanf. It is a stack variable so we should not assume it will 0 initialized...

6.2AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/04/16 2:12 p.m.•30 views

CVE-2025-22082 iio: backend: make sure to NULL terminate stack buffer

In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the buffer in iiobackenddebugfswritereg before passing it to sscanf. It is a stack variable so we should not assume it will 0 initialized...

0.00201EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/04/16 2:12 p.m.•23 views

CVE-2025-22082

In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the buffer in iiobackenddebugfswritereg before passing it to sscanf. It is a stack variable so we should not assume it will 0 initialized...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•2 views

CVE-2025-22082: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the buffer in iiobackenddebugfswritereg before passing it to sscanf. It is a stack variable so we should not assume it will 0 initialized...

5.5CVSS6.1AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•22 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an iio backend that does not properly terminate a stack buffer, potentially resulting in a buffer overflow...

5.5CVSS6.8AI score0.00201EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•11 views

libexpat Buffer Overflow Code Execution

The vulnerability of the libexpat library for analyzing XML files involves buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

7.8CVSS7.7AI score0.01353EPSS
SaveExploits0References14Affected Software7
Positive Technologies
Positive Technologies
•added 2025/04/14 12:00 a.m.•2 views

PT-2025-55165

Уязвимость функции remove whitespace кластерного движка Corosync связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.6CVSS5.8AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/13 12:00 a.m.•23 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium sized network environments. A stack buffer overflow vulnerability exists in the D-Link DI-8100. The vulnerability stems from the authasp function in the /auth.asp file in the jhttpd component not effectively limitin...

8.8CVSS7.3AI score0.13193EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2025/04/11 12:00 a.m.•17 views

Windows Telephony Service Code Execution

The vulnerability of the Windows Telephony Service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a request to the server...

10CVSS8.3AI score0.01243EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/10 4:20 p.m.•31 views

CVE-2025-3289

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.5AI score0.00308EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•22 views

Wayland Protocol Buffer Overflow

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.5AI score0.00438EPSS
SaveExploits0References17Affected Software8
osv_usn
osv_usn
•added 2025/04/09 11:41 p.m.•24 views

USN-7346-3 opensc vulnerabilities

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...

7.1CVSS7.4AI score0.02782EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2025/04/09 3:15 a.m.•20 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.7CVSS6AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•7 views

PT-2025-15540 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: A stack-based buffer overflow in the Windows Telephony Service allows an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no...

10CVSS8.9AI score0.01243EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•28 views

PT-2025-15637

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020 affected versions not specified Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to insufficient boundary...

8.8CVSS6.8AI score0.00414EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•10 views

PT-2025-28638 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow write issue. The crash state involves the functions snap usedef, lj snap purge, and lj record ins...

7AI score
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2025/04/06 10:01 p.m.•13 views

tarantool:luaL_loadbuffer_fuzzer: Stack-buffer-overflow in snap_usedef

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6716030632394752 Project: tarantool Fuzzing Engine: afl Fuzz Target: luaLloadbufferfuzzer Job Type: aflasantarantool Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/04/04 5:04 a.m.•12 views

CVE-2025-3196

A stack-buffer-overflow vulnerability was found in the Assimp::MD2Importer::InternReadFile function within the Assimp Library. This issue occurs when processing certain malformed files, leading to an out-of-bounds write and potential application crash. Mitigation Mitigation for this issue is eith...

5.3CVSS7.2AI score0.00316EPSS
SaveExploits1References9
Rows per page
Query Builder