CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763

CVE-2024-33763 affects lunasvg v2.3.9 with a stack-based buffer issue in lunasvg/source/layoutcontext.cpp. The SNYK entry describes a stack-based overflow due to improper buffer size validation, potentially enabling code execution or DoS. Remediation per the linked advisory is to upgrade to lunas...

OSV-2024-336 Stack-buffer-underflow in mkechar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68343 Crash type: Stack-buffer-underflow READ 4 Crash state: mkechar sympartition ntod...

PT-2024-40721 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a stack-buffer-underflow READ 4 crash type. The crash state involves functions such as mkechar, sympartition, and ntod. No information ...

OSV-2024-319 Stack-buffer-underflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68328 Crash type: Stack-buffer-underflow READ 4 Crash state: filterapplychain filterapplychain initializeoutputfilters...

PT-2024-40711 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read crash. The crash state includes functions such as filter apply chain and initialize output filters...

CVE-2024-26828 cifs: fix underflow in parse_server_interfaces()

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that "bytesleft" is type ssizet...

CVE-2024-26828

CVE-2024-26828 is a Linux kernel issue in the CIFS SMB client: parse_server_interfaces() incorrectly compares bytes_left/size with mixed signed/unsigned types (ssize_t vs size_t), causing a loop to continue when remaining bytes become negative, enabling a buffer underflow. The advisories describe...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a parseserverinterfaces buffer underflow...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

Buffer overflow

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

CVE-2023-34351 affects Intel® PCM software prior to version 202307. The issue is a buffer underflow in PCM components that could allow an unauthenticated remote attacker to trigger a denial of service via network access. The CVSS v3.1 base score is 7.5 (High), with network attack vector, no privi...

PT-2024-1789 · Intel · Intel(R) Pcm

Name of the Vulnerable Software and Affected Versions: IntelR PCM software versions prior to 202307 Description: The issue is related to a buffer underflow in some IntelR PCM software, which may allow an unauthenticated user to potentially enable denial of service via network access. This could b...

Intel® PCM Software Advisory

Summary: A potential security vulnerability in some Intel® Performance Counter Monitor PCM software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34351 Description: Buffer underflow in some Intel®...

K000138586: Node.js c-areas vulnerability CVE-2023-31130

Security Advisory Description c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would...

CentOS 8 : c-ares (CESA-2023:7207)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:7207 advisory. - Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c. CVE-2020-22217 - c-ares is an...