CVE-2024-26339

swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a...

llama.cpp GGUF library info->ne heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1914 llama.cpp GGUF library info-ne heap-based buffer overflow vulnerability February 26, 2024 CVE Number CVE-2024-21802 SUMMARY A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A special...

llama.cpp GGUF library header.n_tensors heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1915 llama.cpp GGUF library header.ntensors heap-based buffer overflow vulnerability February 26, 2024 CVE Number CVE-2024-21836 SUMMARY A heap-based buffer overflow vulnerability exists in the GGUF library header.ntensors functionality of llama.cpp Commit...

Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-11673)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Painter 9.1.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code on the system, causing the application...

Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-09898)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Painter version 9.1.1 and prior versions, which stems from the presence of a write-anywhere vulnerability that could lead to the execution...

Gnu Coreutils Buffer Overflow Vulnerability

Gnu Coreutils is a core toolset of the GNU community. Gnu Coreutils suffers from a buffer overflow vulnerability that stems from the presence of a heap overflow, which can be exploited by an attacker to cause an application crash and denial of service...

Siemens Tecnomatix Plant Simulation Buffer Overflow Vulnerability (CNVD-2024-09325)

Tecnomatix Plant Simulation models, simulates, explores and optimizes logistics systems and their processes. These models allow material flow, resource utilization and logistics analysis of all manufacturing plans from global production facilities to local plants and specific production lines pri...

Siemens Tecnomatix Plant Simulation Buffer Overflow Vulnerability (CNVD-2024-09326)

Tecnomatix Plant Simulation models, simulates, explores and optimizes logistics systems and their processes. These models allow material flow, resource utilization and logistics analysis of all manufacturing plans from global production facilities to local plants and specific production lines pri...

CentOS 8 : flac (CESA-2023:5046)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:5046 advisory. - Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

Buffer overflow

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel...

Tenda i6 formSetAutoPing function buffer overflow vulnerability

Tenda i6 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the ping1 parameter of the formSetAutoPing function in /goform/setAutoPing that fails to correctly validate the length of the input data, and can be...

Tenda AC10U formWifiWpsOOB function buffer overflow vulnerability

Tenda AC10U is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda AC10U formWifiWpsOOB function, which originates from the index parameter of the formWifiWpsOOB function failing to properly validate the length of the input data, which can be exploited by an...

TOTOLINK A3700R setParentalRules method buffer overflow vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that stems from the setParentalRules method failing to properly validate the length size of input data, which can be exploited by an attacker to execut...

CVE-2024-23613 Symantec Deployment Solution Remote Code Execution

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

SWFTools lex.swf5.c:1321 Page Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the swf5lex method on the lex.swf5.c:1321 page that fails to correctly validate the length of the input data, and can be exploited by an...

CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

CVE-2023-43823 Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution...

The vulnerability of the validateAMCWSConnection method in the Avalanche mobile device management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the validateAMCWSConnection method in the Avalanche mobile device management system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2024-1257 · Edk2 +11 · Edk2 +11

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the DHCPv6 Advertise Message Handler component of the EDK2 library. This vulnerability can be exploited by an attacker to gain...