CVE-2021-45951

Dnsmasq 2.86 has a heap-based buffer overflow in checkbadaddress called from checkforboguswildcard and FuzzCheckForBogusWildcard. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

Out-of-bounds Write

GDAL has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45932

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 4 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45932

CVE-2021-45932 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow of 4 bytes occurs in MqttDecode_Publish (invoked via MqttClient_DecodePacket and MqttClient_HandlePacket). Reported impact per NVD indicates partial availability impact; exploitation status is not documented in the provided...

CVE-2021-45933

The vulnerability CVE-2021-45933 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow (8 bytes) occurs in MqttDecode_Publish, called from MqttClient_DecodePacket and MqttClient_HandlePacket. The root cause is improper memory boundary handling in that function. The impact is not elaborated b...

CVE-2021-45933

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45935

Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...

CVE-2021-45935

Summary: CVE-2021-45935 affects Grok 9.5.0 and involves a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (invoked via std::__1::__packaged_task_func and related bindings). Impact (as per sources): NVD indicates a base score of 4.3 (MEDIUM) under CVSS v2, and 5.5 (MEDIUM) under C...

CVE-2021-45935

Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...

CVE-2021-45936

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecodeDisconnect called from MqttClientDecodePacket and MqttClientWaitType...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45939

The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...

CVE-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45952

CVE-2021-45952 affects dnsmasq 2.86 with a heap-based buffer overflow in dhcp_reply (triggered via dhcp_packet/FuzzDhcp). Public references confirm this family includes related CVEs and vendor remarks that 45951–45957 may not represent real vulnerabilities. For mitigation, some sources (CBLMARINE...

CVE-2021-45952

Removed by vendor...

CVE-2021-45954

CVE-2021-45954 is tied to dnsmasq 2.86, describing a heap-based buffer overflow in extract_name (triggered via answer_auth and FuzzAuth). Nessus/NASL data repeatedly notes no vendor patch available for this and related CVEs in unpatched-host entries, with affected packages listed as dnsmasq 2.86 ...

CVE-2021-45955

CVE-2021-45955 affects dnsmasq 2.86. The issue is a heap-based buffer overflow in resize_packet, triggered via FuzzResizePacket and fuzz_rfc1035.c, due to missing bounds check during pseudo header re-insertion. Public sources in connected documents confirm this specific function/file path and the...