CVE-2017-18691

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software. There are multiple Buffer Overflows in TSP sysfs cmdstore. The Samsung ID is SVE-2016-7500 January 2017...

CVE-2011-0177

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0193

Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Canon RAW image...

CVE-2011-0176

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...

CVE-2026-21673

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

CVE-2026-21673

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

Linux Distros Unpatched Vulnerability : CVE-2022-50763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: marvell/octeontx - prevent integer overflows The codelength value comes from the firmware file. If your firmware is untrusted realistically there is...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from failure to prevent integer overflows, which could result in a buffer overflow...

CVE-2025-66046

The CVE-2025-66046 entry concerns libbiosig version 3.9.1 from The Biosig Project. The vulnerable component is the MFER parsing functionality, with stack-based buffer overflow flaws identified when processing MFER files containing Tag 67. The impact is arbitrary code execution via a crafted file,...

The vulnerability of the Common Log File System Driver for Windows operating systems, which allows attackers to escalate their privileges.

The vulnerability of the Common Log File System Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2023-53797

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Use ktimet rather than int when dealing with timestamps Code which interacts with timestamps needs to use the ktimet type returned by functions like ktimeget. The int type does not offer enough space to store these...

The vulnerability of the validate_static_route() function in Linksys E1200 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the validateStaticRoute function in Linksys E1200 router software lies in the potential for buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

PT-2025-48236

Name of the Vulnerable Software and Affected Versions validator versions prior to 13.15.22 Description The package validator, in versions prior to 13.15.22, contains an issue related to incomplete filtering of special elements within the isLength function. Specifically, the function does not...

SUSE SLED15: elfutils / elfutils-lang / libasm-devel / libasm1 / libasm1-32bit / etc (SUSE-SU-2025:4092-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4092-1 advisory. - Fixing build/testsuite for more recent glibc and kernels. - Fixing denial of service and gener...

BASICS: Binary Analysis and Stack Integrity Checker System for Buffer Overflow Mitigation

Cyber-Physical Systems have played an essential role in our daily lives, providing critical services such as power and water, whose operability, availability, and reliability must be ensured. The C programming language, prevalent in CPS development, is crucial for system control where reliability...

SUSE-SU-2025:4148-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2025-59798: Fixed stack-based buffer overflow in pdfwritecmap in devices/vector/gdevpdtw.c. bsc1250353 - CVE-2025-59799: Fixed stack-based buffer overflow in pdfmarkcoercedest in devices/vector/gdevpdfm.c via a large size value...

The vulnerability of the kernel component in Linux operating systems, which allows a hacker to cause a system failure

The vulnerability of the kernel component in Linux operating systems is related to integer overflows. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-40815

CVE-2025-40815 affects Siemens LOGO! devices (LOGO! 12/24RCE, 230RCE, 24CE and SIPLUS variants, all versions listed) where TCP packet handling to several methods fails to validate input size. The underlying issue is a buffer overrun risk due to improper TCP packet structure validation, which can ...

Astra Linux – Vulnerability in libxml2

A flaw was discovered in the xmlBuildQName function of libxml2. Integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue may result in memory corruption or a denial of service when processing malicious input...

OpenEXR < 3.4.3 -- multiple vulnerabilities

Cary Phillips reports: Patch release that addresses several bugs, primarily involving properly rejecting corrupt input data. He goes on to report various relevant items including heap buffer overflows, use-after-free, use of uninitialized memory and other bugs, several of them found by OSS-fuzz,...