CVE-2021-33023

Advantech WebAccess (HMI/SCADA) is affected by CVE-2021-33023: a heap-based buffer overflow in handling IOCTL 0x2722 can enable remote code execution. Affected products are WebAccess versions 9.02 and earlier. The vulnerability allows code execution with high privileges and requires no authentica...

CVE-2021-33023 Advantech WebAccess

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

Heap-based Buffer Overflow in hoene/libmysofa

Description system : ubuntu 20.04 build command cd libmysofa mkdir build cd build CC=clang CXX=clang++ CFLAGS="-fsanitize=address -g" CXXFLAGS="-fsanitize=address -g" cmake ../ make all Proof of Concept https://drive.google.com/file/d/1JbQAECcj5-SDRZVUsRWiaBgJQZ0nMiK/view?usp=sharing repro...

Fedora 34 : 2:vim (2021-968f57ec98)

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-968f57ec98 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778 - vim is vulnerable to Use After Free CVE-2021-3796 Note that Nessus has not tested...

CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3875

CVE-2021-3875 is a Vim vulnerability described as a heap-based buffer overflow. Connected sources tie this CVE to Vim and reference an associated issue in vim’s ex_docmd.c (out-of-bounds read) as part of the same advisory family, illustrating overlapping memory-corruption concerns. The primary ef...

CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3875 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

Schneider Electric IGSS Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of TCP traffic by the dc.exe process. The issue results from the...

GHSA-9G8H-PJM4-Q92P Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

GPAC 0.8.0 is affected by CVE-2020-22677 due to a heap-based buffer overflow in dump_data_hex() within box_dump.c, which can cause a denial of service via crafted input. This vulnerability is confirmed across multiple feeds (NVD/CNVD/OSV/Gentoo GLSA), and remediation is to upgrade to a newer GPAC...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...