36 matches found
CVE-2026-67673
A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0 . The flaw is triggered during the processing of the edl fw_flash command, where the "> argument is copied into a 64-byte stack buffer using memcpy without adequate length validation. An attacker...
CVE-2026-67673
A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...
PYSEC-2026-1395 FastChat Denial of Service vulnerability
A Denial of Service DoS vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...
CVE-2026-22320
A stack-based buffer overflow in the CLI’s TFTP file-transfer command handling can be triggered by a low-privileged attacker with Telnet/SSH access by supplying an unexpected or oversized filename input. This memory corruption affects the internal buffer, rendering the CLI and web dashboard unava...
GHSA-79RP-V9RM-GXM8 FastChat Denial of Service vulnerability
A Denial of Service DoS vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...
PYSEC-2025-99
A Denial of Service DoS vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server...
CVE-2024-12070
A Denial of Service DoS vulnerability exists in the file upload feature of haotian-liu/llava, specifically in Release v1.2.0 LLaVA-1.6. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large...
CVE-2024-10912
A Denial of Service DoS vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...
CVE-2024-12074 Denial of Service in automatic1111/stable-diffusion-webui
A Denial of Service DoS vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large...
CVE-2022-3386: Stack-based Buffer Overflow
Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution...
RealPlayer buffer overflow
Buffer overflow on oversized filename in wathced folder...
Windows ZIP folders buffer overflow
Integer overflow in DynaZip DUNZIP32.DLL library on oversized filename in archive...
XNView buffer overflow
Buffer overflow on oversized filename...
Brooksnet Remote Print Manager buffer overflow
Buffer overflow on oversized filename...
Cygwin Windows POSIX emulation libraries buffer overflow
Buffer overflow on oversized filename...
Atmoix MP3 buffer overflow
Buffer overflow on oversized filename...
ZZIPlib / zzcat buffer overflow
Stack buffer overflow stack overrun on oversized filename...
unrarlib library buffer overflow
Buffer overflow in urarlibget function on oversized filename...