CVE-2023-52389

CVE-2023-52389 affects POCO’s UTF32Encoding implementation. The vulnerability arises from an integer overflow in Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert(), which may return a negative value for certain UTF-32 byte sequences (>= 0x80000000), leading to a stack buffer overfl...

CVE-2023-52389: Integer Overflow or Wraparound

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

CVE-2023-52389

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

CVE-2023-52389

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

CVE-2023-52389

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

upx:test_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4922689521254400 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7c09dae06bf0...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2024-10440)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability caused by a stack buffer overflow in the WebAudio OscillationNode object. An attacker can exploit this vulnerability to cause the browser ...

CVE-2024-0745

A stack buffer overflow flaw was found in Firefox in the WebAudio OscillatorNode object. This flaw can lead to a potentially exploitable crash...

imagemagick:encoder_gif_fuzzer: Stack-buffer-overflow in FormatLocaleStringList

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4903040851181568 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodergiffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...

RHEL 7 : LibRaw (RHSA-2024:0343)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0343 advisory. LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffe...

D-Link DIR-882 sub_477AA0 Function Stack Buffer Overflow Vulnerability

The D-Link DIR-882 is a home wireless router that supports the latest IEEE802.11acWAVE2 wireless technology. The D-Link DIR-882 suffers from a stack buffer overflow vulnerability that stems from a buffer overflow issue in the sub477AA0 function. No detailed vulnerability details are provided at...

TOTOLINK LR1200GB UploadCustomModule function stack buffer overflow vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from a stack buffer overflow...

CVE-2024-0745

The CVE-2024-0745 issue is a concrete Firefox vulnerability: a stack buffer overflow in the WebAudio OscillatorNode that could cause a crash. It affects Firefox versions older than 122. The root cause is in the WebAudio OscillatorNode code; the impact is a potentially exploitable crash with a hig...

CVE-2024-0745

The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 122...

CVE-2024-0745

The WebAudio "OscillatorNode" object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 122...

PT-2024-1355

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 122 Description The WebAudio OscillatorNode object in Mozilla Firefox was susceptible to a stack buffer overflow, potentially leading to a crash. This issue is related to a buffer overflow in memory, which cou...

CVE-2024-0745

The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 122...

Mozilla Firefox < 122.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 122.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-01 advisory. - Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs show...

CVE-2024-0745: Out-of-bounds Write

The WebAudio OscillatorNode object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 122...

OSV-2024-25 Stack-buffer-overflow in icu_75::PluralRuleParser::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65873 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::PluralRuleParser::parse icu75::PluralRules::createRules plurrulefuzzer.cpp...