1847 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-5388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of...
Linux Distros Unpatched Vulnerability : CVE-2016-7953
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string. CVE-2016-7953 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2018-1000001
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buffer leading to a buffer...
Linux Distros Unpatched Vulnerability : CVE-2006-4336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table...
CVE-2022-49563 crypto: qat - add param check for RSA
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for RSA Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a line...
OSV-2025-63 Stack-buffer-underflow in gs_type1_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391934080 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype1interpret copiedtype1glyphoutline gsdefaultglyphinfo...
PT-2025-5664 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details include a crash type of Stack-buffer-underflow READ 4, with the crash stat...
ghostscript:gs_device_ps2write_fuzzer: Stack-buffer-underflow in gs_type1_interpret
Detailed Report: https://oss-fuzz.com/testcase?key=5694822949650432 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7b6643049c1c Crash State:...
PT-2025-50314
Name of the Vulnerable Software and Affected Versions GLib versions affected versions not specified Description A flaw exists in GLib Gnome Lib that allows a remote attacker to cause heap corruption. This can lead to a denial of service or potential code execution through a buffer-underflow in th...
Important: edk2
Issue Overview: A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. CVE-2021-28216 A BIOS bug in firmware for a particular PC model...
CVE-2024-52990
Animate versions 23.0.8, 24.0.5 and earlier are affected by a Buffer Underwrite 'Buffer Underflow' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to manipulate memory in such a way that they could execu...
espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme
Detailed Report: https://oss-fuzz.com/testcase?key=5786661981585408 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7e18f7d2d700 Crash State: InterpretPhoneme...
PT-2024-9514
Name of the Vulnerable Software and Affected Versions Adobe Animate versions 23.0.8, 24.0.5 and earlier Description The issue is related to a buffer underflow vulnerability. Exploitation of this issue could allow an attacker to execute arbitrary code in the context of the current user. This...
SQLite3 generate_series Stack Buffer Underflow Vulnerability
SQLite3 suffers from a stack buffer underflow condition in seriesBestIndex in the generateseries extension. Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef...
Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine
Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...
SQLite3 generate_series Stack Buffer Underflow
Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef ZEROARGUMENTGENERATESERIES int bStartSeen = 0; / EQ constraint seen on the START column / endif int unusableMask = 0;...
Fortinet FortiWeb Heap buffer underflow in administrative interface (FG-IR-23-001)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-001 advisory. - A buffer underflow vulnerability in FortiOS & FortiProxy HTTP/HTTPS administrative interface could allow an unauthenticated,...
PT-2024-37630 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue occurs in the utf8 trunc function found in zephyr/lib/utils/utf8.c, where last byte p might point to the byte just before the string pointer if the string is empty. This is a buffe...
Buffer underflow in base64decode
With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include "utils.hpp" include // File under test include // Auxiliary headers include include include include include include if hasinclude include namespace fs = std::filesystem; else...
