CVE-2021-45936

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecodeDisconnect called from MqttClientDecodePacket and MqttClientWaitType...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45939

The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...

CVE-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45952

CVE-2021-45952 affects dnsmasq 2.86 with a heap-based buffer overflow in dhcp_reply (triggered via dhcp_packet/FuzzDhcp). Public references confirm this family includes related CVEs and vendor remarks that 45951–45957 may not represent real vulnerabilities. For mitigation, some sources (CBLMARINE...

CVE-2021-45952

Removed by vendor...

CVE-2021-45954

CVE-2021-45954 is tied to dnsmasq 2.86, describing a heap-based buffer overflow in extract_name (triggered via answer_auth and FuzzAuth). Nessus/NASL data repeatedly notes no vendor patch available for this and related CVEs in unpatched-host entries, with affected packages listed as dnsmasq 2.86 ...

CVE-2021-45955

CVE-2021-45955 affects dnsmasq 2.86. The issue is a heap-based buffer overflow in resize_packet, triggered via FuzzResizePacket and fuzz_rfc1035.c, due to missing bounds check during pseudo header re-insertion. Public sources in connected documents confirm this specific function/file path and the...

CVE-2021-45955

Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real...

CVE-2021-45955

Removed by vendor...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45956

CVE-2021-45956 affects dnsmasq 2.86 with a heap-based buffer overflow in print_mac (triggered from log_packet and dhcp_reply). The vendor notes CVE-2021-45951 through CVE-2021-45957 may not represent real vulnerabilities. Public-internal notes in connected docs show related entries and unpatched-...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45957

Removed by vendor...

CVE-2021-45953

CVE-2021-45953 affects dnsmasq 2.86 with a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). Connected Nessus entries expand the family to multiple related CVEs (45951–45957) but note vendor stance that these may not represent real vulnerabilities. MARINER e...

CVE-2021-45942

CVE-2021-45942 affects OpenEXR 3.1.x prior to 3.1.4. The issue is a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute, triggered when called from the IlmThread_3_1 thread pool (NullThreadPoolProvider::addTask / ThreadPool::addGlobalTask). The public description notes this vulnerab...

CVE-2021-45942

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...