AT&T Labs Xmill XML decompression EnumerationUncompressor::UncompressItem heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

AT&T Labs Xmill XML decompression DecodeTreeBlock multiple heap-based buffer overflow vulnerabilities

Summary Multiple heap-based buffer overflow vulnerabilities exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. A specially crafted XMI File can lead to remote code execution. An attacker can provide a malicious file to trigger these vulnerabilities. Tested...

AT&T Labs Xmill XML decompression PlainTextUncompressor::UncompressItem heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

Rockwellautomation Factorytalk Heap-based Buffer Overflow

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to th...

(0Day) Delta Industrial Automation DOPSoft XLS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2021-2293)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 ============= Sudo before 1.9.5p2 contains an off...

MGASA-2021-0396 Updated exiv2 packages fix security vulnerability

Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service DOS via crafted metadata CVE-2021-31291...

Updated exiv2 packages fix security vulnerability

Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service DOS via crafted metadata CVE-2021-31291...

CVE-2021-36584

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...

CVE-2021-36584

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...

CVE-2021-36584

CVE-2021-36584 affects GPAC 1.0.1, with a heap-based buffer overflow in gp_rtp_builder_do_tx3g (ietf/rtp_pck_3gpp.c) that can lead to denial of service. Exploitation demonstrated by MP4Box. Public references describe unpatched status in various distros; Gentoo GLSA 202408-21 advises upgrading to ...

CVE-2020-24829

An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tssectioncomplete in mediatools/mpegts.c that can cause a denial of service DOS via a crafted MP4 file...

CVE-2020-24829

An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tssectioncomplete in mediatools/mpegts.c that can cause a denial of service DOS via a crafted MP4 file...

CVE-2020-24829

GPAC vulnerable in versions v0.5.2–v0.8.0 due to a heap-based buffer overflow in gf_m2ts_section_complete (media_tools/mpegts.c) that can cause a denial-of-service via crafted MP4 files. Affected software: GPAC (mp4box usage demonstrated). Root cause: heap overflow in mpegts handling. Impact: DOS...

CVE-2021-26096

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments...

CVE-2021-33485

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow...

CVE-2021-27954

A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service...

PT-2021-17693 · Ecobee · Ecobee3 Lite

Name of the Vulnerable Software and Affected Versions: ecobee3 lite version 4.5.81.200 Description: A heap-based buffer overflow vulnerability exists in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. An attacker can exploit this vulnerability to force the devic...

openSUSE 15 Security Update : qemu (openSUSE-SU-2021:2591-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2591-1 advisory. - QEMU 5.0.0 has a heap-based Buffer Overflow in flatviewreadcontinue in exec.c because hw/sd/sdhci.c mishandles a write operation in the...