CVE-2024-33763

The lunasvg SVG rendering library (version v2.3.9 ) is vulnerable to a stack-buffer-underflow (also described as an Out-of-bounds Read ) located in the lunasvg/source/layoutcontext.cpp component. This flaw originates from improper buffer size validation and could potentially lead to unauthorized ...

OSV-2024-336 Stack-buffer-underflow in mkechar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68343 Crash type: Stack-buffer-underflow READ 4 Crash state: mkechar sympartition ntod...

PT-2024-40721 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a stack-buffer-underflow READ 4 crash type. The crash state involves functions such as mkechar, sympartition, and ntod. No information ...

OSV-2024-319 Stack-buffer-underflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68328 Crash type: Stack-buffer-underflow READ 4 Crash state: filterapplychain filterapplychain initializeoutputfilters...

PT-2024-40711 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read crash. The crash state includes functions such as filter apply chain and initialize output filters...

flex:fuzz-main: Stack-buffer-underflow in mkechar

Detailed Report: https://oss-fuzz.com/testcase?key=4784777778495488 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7cd7c5f0001c Crash State: mkechar sympartition ntod Sanitize...

flex:fuzz-main: Stack-buffer-underflow in filter_apply_chain

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=5743164481667072 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7c22c670001c Cra...

CVE-2024-26828 cifs: fix underflow in parse_server_interfaces()

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that "bytesleft" is type ssizet...

CVE-2024-26828

CVE-2024-26828 is a Linux kernel issue in the CIFS SMB client: parse_server_interfaces() incorrectly compares bytes_left/size with mixed signed/unsigned types (ssize_t vs size_t), causing a loop to continue when remaining bytes become negative, enabling a buffer underflow. The advisories describe...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a parseserverinterfaces buffer underflow...

flex:fuzz-main: Stack-buffer-underflow in mkechar

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=4942722591948800 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7e791fa0001c Cra...

gdbm: stack-buffer-underflow in get_dump_line

Hi! This is a manual report, different from the robot-generated ones you've probably seen in the past. With the following fuzz target which tests gdbmloadfromfile: include include include include include include include include static char dbname = "a.db"; int LLVMFuzzerTestOneInputconst uint8t...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

Buffer overflow

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-34351

CVE-2023-34351 affects Intel® PCM software prior to version 202307. The issue is a buffer underflow in PCM components that could allow an unauthenticated remote attacker to trigger a denial of service via network access. The CVSS v3.1 base score is 7.5 (High), with network attack vector, no privi...

PT-2024-1789 · Intel · Intel(R) Pcm

Name of the Vulnerable Software and Affected Versions: IntelR PCM software versions prior to 202307 Description: The issue is related to a buffer underflow in some IntelR PCM software, which may allow an unauthenticated user to potentially enable denial of service via network access. This could b...

CVE-2023-34351: Buffer Underwrite

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...