201 matches found
libpng: LIBPNG heap buffer overflow
A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...
libpng: LIBPNG heap buffer overflow
A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...
kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwis...
CVE-2025-60693
A stack-based buffer overflow exists in the getmergemac function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function concatenates up to six user-supplied CGI parameters matching 05 into a fixed-size buffer a2 without proper bounds checking, appending...
Siemens SIMATIC S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2023-39615)
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support...
The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.
The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2025-9338
The connected PT-Security advisory for PT-2025-45177 confirms a vulnerability in AsIO3.sys involving improper restriction of operations within a memory buffer, enabling local privilege escalation if a specially crafted process is executed. It identifies AsIO3.sys as the affected driver and notes ...
Astra Linux – Vulnerability in ntpsec
The vulnerability of the NTPsec network time protocol lies in reading data from buffers within acceptable limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
ROS-20251016-04
Vulnerability of X509VERIFYPARAMadd0policy function of OpenSSL library is related to errors in the procedure of of certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely to perform a "man-in-the-middle" type of attack. remotely to perform a...
CVE-2023-53676 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow The function liotargetnaclinfoshow uses sprintf in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With...
EUVD-2017-1455
Malware in sbrugna...
CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48
When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...
EUVD-2022-49205
Malicious code in bioql PyPI...
EUVD-2023-59930
Malicious code in bioql PyPI...
The vulnerability of the sch_ets.c component in the Linux operating system’s kernel allows a attacker to compromise data integrity.
The vulnerability of the schets.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise data integrity...
CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...
CVE-2023-53331 pstore/ram: Check start of empty przs during init
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a "pstore/ram: Do not treat empty buffers as valid", initialization would assume a prz was valid after seeing that the buffersize is zero regardless of the...
RHEL 8 : kernel (RHSA-2025:15660)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15660 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ext4: use-after-free in...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Mac_Os_X
Mac&IOS HackStudy Mac&IOS安全学习资料汇总 Mac&IOS安全学习网站收集： http://samdmarshall.com https://www.exploit-db.com https://reverse.put.as http://highaltitudehacks.com/security/ http://www.dllhook.com/ http://www.securitylearn.net/archives/ http://securitycompass.github.io/iPhoneLabs/index.html...
The vulnerability of the Despeckle Plugin component of the GIMP graphic editor, which arises from exceeding the buffer memory limit, allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the Despeckle Plugin component of the GIMP graphic editor is related to the execution of code beyond the boundaries of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a system failure or execute arbitrary code...