CVE-2017-20205: Stack-based Buffer Overflow

Valve's Source SDK source-sdk-2013's ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function nexttoken copies characters from an input string into a fixed-size stack buffer without performing bounds checks. When ParseKeyValue processes a collisionpa...

EUVD-2019-6986

Malware in sbrugna...

GNU cflow Buffer Overflow Vulnerability

GNU cflow is a flowchart generator from the GNU Project that reads C source files and generates externally referenced flowcharts. A buffer overflow vulnerability exists in the 'nexttoken' function of the parser.c file in GNU cflow 1.6 and earlier versions, which can be exploited by an attacker to...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

UBUNTU-CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

CVE-2019-16166: Out-of-bounds Read

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

libreoffice/htmlfuzzer: Bad-cast to SdrObjectSwHTMLParser::EndMarquee in SwHTMLParser::NextToken

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5154703525543936 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...