Design/Logic Flaw

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in...

CVE-2020-24266

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in getl2len that can make tcpprep crash and cause a denial of service...

SonicOS SSLVPN unauthenticated buffer overflow leads to firewall crash

A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS on the firewall SSLVPN service and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3 and SonicO...

Heap Buffer Overflow

tigervnc is vulnerable to heap buffer overflow. It is possible because of heap buffer overflow in TightDecoder::FilterGradient...

CVE-2020-14376

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying ivdata from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...

JerryScript ecma_is_lexical_environment buffer overflow vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryScript ecmaislexicalenvironment has a buffer overflow vulnerability that can be exploited by attackers to submit special requests that can crash an application or execute arbitrary code...

CVE-2020-16290

A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:2142-1)

This update for xrdp fixes the following issues : Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 Note that Tenable Network Security has extracted the preceding description block direct...

Microsoft Hyper-V RemoteFX vGPU Buffer Overflow Vulnerability (CNVD-2020-45324)

Microsoft Windows is a popular operating system. A buffer overflow vulnerability exists in Microsoft Hyper-V RemoteFX vGPU that originates from a program's inability to properly validate authenticated user input on a virtual machine operating system. An attacker could exploit the vulnerability by...

Ntop nDPI H.323 Parser Buffer Overflow Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the ndpisearchh323 file in lib/protocols/h323.c of the H.323 parser in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing...

NVIDIA Virtual GPU Manager vGPU Buffer Overflow Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. A buffer overflow vulnerability exists in NVIDIA Virtual GPU Manager vGPU plug-in, which originates when the software reads from a buffer by using a buffer access...

NVIDIA Virtual GPU Manager vGPU Buffer Overflow Vulnerability (CNVD-2021-27718)

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. A buffer overflow vulnerability exists in NVIDIA Virtual GPU Manager that originates from the vGPU plug-in not restricting or properly limiting operations within resourc...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24361)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

CVE-2020-9604

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-41322)

Speed View is a super-fast ultra-high-definition viewing software, compatible with almost all mainstream, professional image formats, can quickly open dozens of megabytes or even hundreds of megabytes of large pictures, but also supports a variety of shortcut operations. Extreme Viewer suffers fr...

TRENDnet TEW-827DRU Buffer Overflow Vulnerability (CNVD-2020-33479)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the ssi binary in the TRENDnet TEW-827DRU 2.06B04 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

OPENSUSE-SU-2020:0806-1 Security update for libntlm

This update for libntlm fixes the following issues: Update to release 1.6: CVE-2019-17455: Fixed a buffer overflow in buildSmbNtlmAuth function. boo1153669...

HFS Http File Server 2.3m Build 300 - Buffer Overflow (PoC)

Exploit Title: HFS Http File Server 2.3m Build 300 - Buffer Overflow PoC Date: 2020-06-05 Exploit Author: hyp3rlinx Vendor Homepage: www.rejetto.com CVE : CVE-2020-13432 + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

Extreme Viewer suffers from buffer overflow vulnerability

Extreme Viewer is a fast viewing software, compatible with all major image formats, and also supports raw, psd, cr2 and so on. Ltd. Extreme Viewer has a buffer overflow vulnerability, an attacker can cause the software to crash through the poc, the successful exploitation of this vulnerability ca...

libjpeg-turbo Buffer Overflow Vulnerability

libjpeg is a C language library for processing image data in JPEG format. The product includes JPEG decoding, JPEG encoding and other JPEG functions. libjpeg-turbo is an optimized and improved version of libjpeg. A buffer overflow vulnerability exists in the 'getrgbrow' function of the rdppm.c fi...