CVE-2021-43453

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2021-43453

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2022-25596 ASUS RT-AC86U - Heap-based buffer overflow

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. A remote attacker is able to cause a system crash...

CVE-2021-43453: Out-of-bounds Read

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2022-25596: Out-of-bounds Write

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

PT-2022-3353

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to v6.1.6.0 Description A heap-based buffer overflow exists in the simulator module of the graphic editor V-SFT, which may allow an attacker to obtain information and/or execute arbitrary code by having a user open a...

PT-2022-3890

Name of the Vulnerable Software and Affected Versions ASUS RT-AC56U affected versions not specified Description The configuration function of the ASUS RT-AC56U has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length. This allows an...

CVE-2022-1253 Heap-based Buffer Overflow in strukturag/libde265

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release...

Amazon Linux AMI : vim (ALAS-2022-1579)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1579 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted...

CVE-2022-1253: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release...

CVE-2022-1253

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release...

Fix of CVE: CVE-2022-0943

CVE-2022-0943: fix heap-based buffer overflow...

CVE-2022-24795: Heap-based Buffer Overflow

yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing with large 2GB inputs. The reallocation logic at yajlbuf.cL64 may result in the need 32bit...

Autodesk Navisworks Manage PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

F5 Networks BIG-IP : Vim vulnerability (K08827426)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K08827426 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0359ImpactThis vulnerability...

Heap-based Buffer Overflow in libr/bin/format/ne/ne.c

This vulnerability is of type heap-buffer-overflow. And after quick investigation I think it is very likely to be successfully exploited to remote code execution. The bug exists in latest stable release radare2-5.6.6 and lastest master branch 8317a34b7e4ab731e230dcdd81adc9323c5b518b, updated in...

Ubuntu: Security Advisory (USN-5357-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-4206

A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on th...

CVE-2021-4207

A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use...