FreeRDP clear_decompress_bands_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the cleardecompressbandsdata function having no offset validation. An attacker could exploit this vulnerability to cause a denial...

Rocky Linux 8 : sqlite (RLSA-2023:3840)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3840 advisory. - Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script. CVE-2020-24736 No...

CVE-2023-40848

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "sub7D858."...

CVE-2023-40843

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "sub73004."...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC9 due to a buffer overflow in the firewallEn parameter of /goform/SetFirewallCfg...

CVE-2023-40843

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "sub73004."...

CVE-2023-40845

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'sub34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks...

CVE-2023-40846

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function sub90998...

DEBIAN-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

Buffer overflow

Tenda AC15 V1.0BRV15.03.05.18multiTD01 was discovered to contain a buffer overflow via the function FUN00010e34...

SUSE-SU-2023:3207-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate bsc1211994. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642. - CVE-2023-32762: Fixed Qt...

Stack overflow

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

TP-LINK Archer AX21 Buffer Overflow Vulnerability

The TP-LINK Archer AX21 is a wireless router from China P&L TP-LINK. The TP-LINK Archer AX21 suffers from a buffer overflow vulnerability that originates from a program failing to properly validate the length and size of input data, which can be exploited by remote attackers to execute arbitrary...

The vulnerabilities of the microprogramming software for Honeywell Experion PKS programmable logic controllers, the measurement and computing controllers Experion LX, and the distribution control system Experion PlantCruise allow a intruder to execute arbitrary code.

The vulnerability of microprogrammed software in Honeywell Experion PKS programmable logic controllers, Experion LX measurement and control controllers, and Experion PlantCruise distribution systems is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker...

The vulnerability of Mitsubishi Electric’s M8V, M8, C80, and IoT Unit series controllers’ microprogramming software lies in the fact that the operation output goes beyond the buffer in memory. This allows a hacker to cause a malfunction in the device or execute arbitrary code.

The vulnerability of Mitsubishi Electric’s M8V, M8, C80, and IoT Unit microcontroller software lies in the fact that the operation data is stored outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause malfunctions in the device, or execute arbitrary code by...

Panasonic Control FPWIN Pro 缓冲区错误漏洞

Panasonic Control FPWIN Pro is a programming software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Control FPWIN Pro version 7.6.0.3 and prior versions, which stems from a buffer overflow vulnerability that could allow an attacker to execute arbitrary code when...

Tenda FH1203 缓冲区错误漏洞

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the entrys parameter of the fromAddressNat method failing to properly validate the length...

CVE-2023-24019

A stack-based buffer overflow vulnerability exists in the urvpnclient httpconnectionreadcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-24019

CVE-2023-24019 affects Milesight UR32L. A pre-authentication, network-accessible, stack-based buffer overflow exists in the UR32L HTTP server (urvpn_client http_connection_readcb), allowing remote code execution or a crash when processing crafted packets. Connected documents cite TALOS advisories...

CVE-2023-37245

CVE-2023-37245: a buffer overflow in the modem pinctrl module can affect the modem’s integrity and availability. Public sources (NVD) show high impact (I/H, A/H) with network access, no user interaction required. Connected documents corroborate this vulnerability on Huawei HarmonyOS ecosystems an...