114 matches found
CVE-2025-39988 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
In the Linux kernel, the following vulnerability has been resolved: can: etases58x: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the...
CVE-2025-59729 Heap-buffer-overflow read in FFmpeg DHAV get_duration
When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...
The vulnerability of the ipmi_create_user() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ipmicreateuser function in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
AZL-64410 CVE-2025-6818 affecting package hdf5 for versions less than 1.14.6-1
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5Ochunkprotect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may ...
kernel: ibmvnic: Use kernel helpers for hex dumps
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...
The vulnerability of the grub_udf_read_block function in the Grub2 operating system allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the grubudfreadblock function in the Grub operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the web_tacplus_serverEdit_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the webtacplusserverEditpost function in the microprogramming software for PLANET Technology relates to the issue of the operation exceeding the buffer boundaries in memory when processing the tacIp parameter. Exploiting this vulnerability could allow an attacker to compromis...
The vulnerability of the xsk_setsockopt() function in the net/xdp/xsk.c module, which implements networking functions for the Linux kernel, allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the xsksetsockopt function in the net/xdp/xsk.c module, which implements networking functions for the Linux kernel, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...
The vulnerability of the BmpInput::read_rle_image() function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library allows a attacker to compromise the integrity of the protected information or cause service failures.
The vulnerability of the BmpInput::readrleimage function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information or caus...
UBUNTU-CVE-2025-30472
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orftokenendianconvert in exec/totemsrp.c via a large UDP packet...
CVE-2024-52533
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character...
CVE-2024-35423
vmir e8117 was discovered to contain a heap buffer overflow via the wasmparsesectionfunctions function at /src/vmirwasmparser.c...
The vulnerability of the `postprocess_terminfo()` function in the `tinfo/parse_entry.c` component of the input/output control library for the Ncurses terminal emulator, related to buffer out-of-bounds writing, allows a malicious actor to cause a service failure.
The vulnerability of the postprocessterminfo function in the tinfo/parseentry.c component of the input/output control library for the Ncurses terminal emulator is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failur...
The vulnerability of the smb_inherit_dacl() function in the Linux operating system, related to writing beyond buffer boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the smbinheritdacl function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
AZL-42946 CVE-2024-39291 affecting package kernel for versions less than 5.15.160.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfxv943init cpcomputemicrocode and rlcmicrocode The function gfxv943initmicrocode in gfxv943.c was generating about potential truncation of output when using the snprintf function. The issue was due...
UBUNTU-CVE-2024-29159
HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterscaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...
UBUNTU-CVE-2023-26793
libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...
Dell BIOS 缓冲区错误漏洞
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that stems from the inclusion of an out-of-bounds write vulnerability that can be exploited by a local attacker with administrator privilege...
Gross Security Breach
gross is a gray-listed service for Postfix, Exim, Sendmail, and Oracle Communications Messaging Server. A security vulnerability exists in Gross versions prior to 0.9.3 through 1.0.4, which stems from the presence of a buffer overflow vulnerability. An attacker could use this vulnerability to...