CVE-2020-8249

CVE-2020-8249: Desbordamiento de búfer en Pulse Secure VPN Linux Client El ejecutable SUID root pulsesvc, tiene una función “doupload” que llama de forma insegura a “sprintf”, lo que puede resultar en un desbordamiento de búfer. Debido a que “sprintf” escribe los valores en la pila, si se le pasa...

CVE-2019-12937-ToaruOS

CVE-2019-12937 ToaruOS es un sistema operativo de código abierto escrito en C, desarrollado como un proyecto de hobby por un estudiante de informática de la Universidad de Illinois. ToaruOS funciona en arquitecturas POSIX y x86. Sus principales características incluyen soporte para procesos e...

inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils no se ha actualizado en 5 años, y tampoco el paquete oficial de Arch. Se ha lanzado un parche que aborda CVE-2019-0053 un exploit de desbordamiento de búfer por el uso de sprintf en lugar de snprintf, pero no hay un lanzamiento oficial a la vista. Honestamente, hay muchos más problemas...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...

CVE-2026-89575

A flaw was found in the Linux kernel's device mapper dm-raid1 component. This vulnerability occurs in the buildconstructorstring function, where insufficient space is reserved for a NUL-terminator when formatting a string with sprintf. This oversight can lead to a buffer overflow, potentially...

CVE-2026-89575

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

CVE-2026-89575

CVE-2026-89575 affects the Linux kernel 's device-mapper RAID1 (dm raid1) subsystem. The vulnerability is a buffer overflow in the build_constructor_string() function, where the code fails to reserve space for the NUL-terminator after the maximum 20 decimal digits of a long long value when callin...

CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string()

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

EUVD-2026-76487

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string()

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

CVE-2026-89010

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 are vulnerable to an unauthenticated OS command injection via the sync_server daemon on TCP port 13136 . The root cause is that the daemon interpolates attacker-controlled filename input containing shell metacharacters in...

PT-2026-90291

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build constructor string Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

CVE-2022-36163

CVE-2022-36163 Descripción sugerida Se encontró una vulnerabilidad de cadena de formato en el lector de pdf pdftoroff hovacui 1.1.0. Un usuario puede controlar el segundo parámetro de sprintf lo que puede provocar una denegación de servicio DoS o divulgación de información para más ataques...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

EUVD-2026-70786

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...

CVE-2026-85452

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...

CVE-2026-85452

MOOS ui-moos (through commit 50b9c6c) contains a buffer overflow in the uMS graphical tool, specifically in ScopeTabPane.cpp and ScopeGrid.cpp. Client and variable names are written into fixed 1024-byte buffers via sprintf without length validation. An attacker who can supply arbitrarily long MOO...

CVE-2026-85452 MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...