Vim ins_typebuf Heap Buffer Overflow DoS

The vulnerability of the instypebuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, and even cause...

Tenda AC6 fromSetSysTime() Code Execution

The vulnerability of the fromSetSysTime function in Tenda AC6 router software stems from the operation that occurs outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of audio...

Amazon Linux 2 : gstreamer1-plugins-base, --advisory ALAS2-2025-3002 (ALAS-2025-3002)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3002 advisory. In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bound...

Routing and Remote Access Service Privilege Escalation

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by this service...

Amazon Linux 2023 : gstreamer1-plugins-base, gstreamer1-plugins-base-devel, gstreamer1-plugins-base-tools (ALAS2023-2025-1184)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1184 advisory. In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash. CVE-2025-47806 In GStreamer through 1.26.1, th...

Medium: gstreamer1-plugins-base

Issue Overview: In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash. CVE-2025-47806 In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer whil...

Linux driver/regulator/gpio-regulator.c DoS

The vulnerability in the drivers/regulator/gpio-regulator.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Windows RRAS Disclosure Sensitive Information

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Libarchive Heap Buffer Overflow DoS

The vulnerability of the Libarchive library is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda AC20 Router fromSetWifiGusetBasic Code Execution

The vulnerability of the fromSetWifiGusetBasic function in the Tenda AC20 router’s microprogramming system is related to the execution of operations outside the buffer in memory when processing the shareSpeed parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

ROS-20250911-02

Vulnerability of the rterawcksummbuf function of the vhost library of the DPDK suite of libraries and drivers for fast packet processing is related to the operation exceeding the memory buffer boundary while processing the len parameter. DPDK packet processing is related to the operation exceedin...

Routing and Remote Access Service Privilege Escalation

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by this service...

GNU Core Utilities sort Heap Buffer Overflow DoS

The vulnerability of the begfield function in the sort component of the GNU Core Utilities set of system utilities is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose confidential information and cause...

Siemens User Management Component Code Execution

The vulnerability of the Siemens User Management Component UMC in the SIMATIC PCS neo industrial process control web system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Linksys E1700 Router QoSSetup Code Execution

The vulnerability of the QoSSetup function in the /goform/QoSSetup microprogramming software for Linksys E1700 routers is related to the operation of writing data outside of the buffer in memory when processing the ackpolicy parameter. Exploiting this vulnerability allows a remote attacker to...

ICU SRBRoot Code Execution

The vulnerability of the SRBRoot::addTag function in the Unicode-based ICU library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code and cause service failures...

Advisory ROSA-SA-2025-2976

Software: rsync 3.4.1 OS: ROSA-CHROME unaffected versions = rsync-3.4.1-1 affected versions rsync-3.4.1-1 CVE-ID: CVE-2024-12084 BDU-ID: 2025-00378 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the rsyncd daemon of the Rsync file transfer and synchronization utility is related to an operation...

Drawing SDK Buffer Overflow DoS

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to the execution of operations beyond the buffer boundaries in memory when processing DWF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause servic...

Simcenter Femap Buffer Overflow RCE

The vulnerability of the Simcenter Femap simulation application lies in the execution of operations beyond the buffer boundaries in memory when processing STP format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...