Arbitrary Code Execution

XMP Toolkit version 2020.1 and earlier is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CLSA-2022-1648149396 Fix CVE(s): CVE-2021-3999

SECURITY UPDATE: single byte buffer underflow and overflow - debian/patches/any/CVE-2021-3999.patch: reject buffer of size 1 and return NULL with errno set to ERANGE - CVE-2021-3999...

CVE-2021-38578: Buffer Underwrite

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

Security Bulletin: Vulnerability in OpenSSL affects ProtecTIER (CVE-2016-2108)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by ProtecTIER. ProtecTIER has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system,...

Mageia: Security Advisory (MGASA-2019-0412)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buffer leading to a buffer underflow and potential code execution...

OSV-2021-1776 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43037 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

PT-2021-27998

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow read error. The crash state involves several functions: InterpretPhoneme, InterpretPhoneme2, and...

espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5260445026484224 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address...

OSV-2021-1689 Stack-buffer-underflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42294 Crash type: Stack-buffer-underflow WRITE 1 Crash state: readxref pdfireadxref pdfisetinputstream...

PT-2021-27943

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow WRITE 1 crash type. The crash state involves functions such as read xref, pdfi read xref, and pdfi set inp...

WS-2021-0587

In ghostscript there is Stack-buffer-underflow in readxref...

ghostscript:gstoraster_fuzzer: Stack-buffer-underflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=6186925189365760 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7f42c7439f1f Crash State: readxref...

Mozilla Firefox Security Advisory (MFSA2013-65) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Mozilla Firefox Security Advisory (MFSA2015-21) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

OSV-2021-1354 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39042 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

PT-2021-27808

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow read error. The crash state involves several functions: InterpretPhoneme, InterpretPhoneme2, and...

espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6480243527909376 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address...

CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...