PT-2025-27394 · Git +1 · Glaze

Name of the Vulnerable Software and Affected Versions: glz affected versions not specified Description: The software contains a stack-buffer-overflow vulnerability. The crash occurs within the glz::from and glz::visit functions when processing data. The crash state involves operations with...

CVE-2022-50185 drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix potential buffer overflow in nisetmcspecialregisters The last case label can write two buffers 'mcregaddressj' and 'mcdataj' with 'j' offset equal to SMCNISLANDSMCREGISTERARRAYSIZE since there are no checks for th...

CVE-2022-50040 net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

CVE-2025-38080 drm/amd/display: Increase block_sequence array size

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the blocksequence...

CVE-2025-6162 TOTOLINK EX1200T HTTP POST Request formMultiAP buffer overflow

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

TOTOLINK EX1200T /boafrm/formDMZ File Buffer Overflow Vulnerability

The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formDMZ in the HTTP POST Request Handler component to properly validate the length and size...

Adobe Substance3D Painter Buffer Overflow Vulnerability

Adobe Substance 3D Painter is a professional 3D texture design tool under the Adobe Creative Cloud ecosystem. Adobe Substance3D Painter suffers from a buffer overflow vulnerability that originates from out-of-bounds writes, which can be exploited by attackers to cause arbitrary code execution...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14364)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the MDIR component command handler. No detailed vulnerability details are provided at this time...

Tenda AC7 /goform/AdvSetLanip File Buffer Overflow Vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. Tenda AC7 suffers from a buffer overflow vulnerability, which originates from the parameter lanMask in the file /goform/AdvSetLanip that fails to correctly validate the length and size of the input data, which can be exploited by an...

Adobe InDesign Desktop Buffer Overflow Vulnerability

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to cause a sensitive memory leak...

D-Link DIR-632 /biurl_grou File Buffer Overflow Vulnerability

The D-Link DIR-632 is a router from China's AUO D-Link. The D-Link DIR-632 suffers from a buffer overflow vulnerability that originates from the failure of the file /biurlgrou in the HTTP POST Request Handler component to properly validate the length and size of the input data, which can be...

TOTOLINK EX1200T /boafrm/formWsc File Buffer Overflow Vulnerability

The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formWsc in the HTTP POST Request Handler component to properly validate the length and size...

CVE-2025-6143 TOTOLINK EX1200T HTTP POST Request formNtp buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

TencentOS Server 3: vorbis-tools (TSSA-2024:0202)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0202 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-6052

CVE-2025-6052 affects GLib’s GString in GLib2. The flaw is a memory overflow in g_string_maybe_expand() when appending to an already very large string, causing the size calculation to be misjudged and data to be written past the allocated memory, leading to crashes or memory corruption. Connected...

TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12747)

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 4.1.8cu.5207. The vulnerability affects the UploadCustomModule function in the /cgi-bin/cstecgi.cgi file in the POST request handling component. An attacker could use this...

CVE-2025-46060

CVE-2025-46060 concerns TOTOLINK N600R v4.3.0cu.7866_B2022506. The vulnerability is a buffer overflow in the UPLOAD_FILENAME component that can be exploited remotely over the network to execute arbitrary code on the device (and may cause denial of service per CNVD sources). Several connected reco...

CVE-2025-46060

Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866B2022506 allows a remote attacker to execute arbitrary code via the UPLOADFILENAME component...

TOTOLINK EX1200T Buffer Overflow Vulnerability (CNVD-2025-12751)

The TOTOLINK EX1200T is a wireless router from TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK EX1200T version 4.1.2cu.5232B20210713, which affects the HTTP POST request processing component of file/boafrm/formFilter with unknown code. A remote attacker could exploit this...

TOTOLINK T10 Buffer Overflow Vulnerability

The TOTOLINK T10 is a dual-band mesh networking router from TOTOLINK for full coverage needs of home and office networks. A buffer overflow vulnerability exists in TOTOLINK T10. The vulnerability stems from incorrect manipulation of the parameter desc in the file /cgi-bin/cstecgi.cgi. An attacker...