SUSE CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

CVE-2022-25732

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25732 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check...

PT-2023-12809 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read in the DNS client. This occurs because of a missing length check, which allows for unauthorized access to...

PT-2023-13288 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing WLAN frames. This occurs because of a missing frame length check, leading to potential data...

DEBIAN-CVE-2022-47940

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...

CVE-2022-20689

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

NETGEAR R7000P 缓冲区错误漏洞

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P version V1.3.1.64 is vulnerable to a buffer overflow vulnerability that originates from the lack of length validation of input data for the KEY1 and KEY2 parameters, which could be exploited to launch a denial of service or...

Qualcomm WLAN 缓冲区错误漏洞

Qualcomm WLAN is a wireless LAN component from Qualcomm Incorporated Qualcomm. A security vulnerability exists in Qualcomm WLAN that stems from a lack of buffer length checking, resulting in a buffer overflow that can lead to a Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...

Grandstream GSD3710 缓冲区错误漏洞

The Grandstream GSD3710 is an HD video access control system from Grandstream. A security vulnerability exists in the Grandstream GSD3710 version 1.0.11.13, which stems from not checking the length of parameters before using the strcopy command, and can be exploited by an attacker to execute a...

Out-of-bounds

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Siemens OpenV2G memory corruption vulnerability

The primary scope of the OpenV2G project is to provide an open source implementation of the latest draft of the ISO/IEC Vehicle-to-Grid Communication Interface V2G CI standard.A memory corruption vulnerability exists in Siemens OpenV2G due to a missing length check in the OpenV2G EXI parsing...

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

CentOS 8 : rpm (CESA-2021:4489)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory. - rpm: missing length checks in hdrblobInit CVE-2021-20266 Note that Nessus has not tested for this issue but has instead relied only on the application's...

多款Qualcomm产品安全漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.SDX55 is a modem.QCA6390 is a central processing unit CPU product. A security vulnerability exists in Qualcomm that stems from a buffer overflow that could result from n...

CVE-2021-26603

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the ArkDigPathA function parsed a file path. This vulnerability is due to missing support for string length check...

Qualcomm 芯片 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that...

Vulnerability of the extract_name() function (rfc1035.c): The Dnsmasq DNS server has a vulnerability related to the failure of operations beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the extractname function rfc1035.c in the Dnsmasq DNS server is related to the lack of length checking on input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Debian DSA-4938-1 : linuxptp - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dsa-4938 advisory. - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an...