OpenSSL CVE-2025-15467

...

kde-thumbnailers:gsthumbnail_fuzzer: Stack-buffer-overflow in GSCreator::create

Detailed Report: https://oss-fuzz.com/testcase?key=5657345622605824 Project: kde-thumbnailers Fuzzing Engine: libFuzzer Fuzz Target: gsthumbnailfuzzer Job Type: libfuzzerasankde-thumbnailers Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffd1ff10c60 Crash State:...

CVE-2020-37000: Stack-based Buffer Overflow

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to...

SUSE-SU-2026:0312-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. - CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes bsc1256834. - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_text_process_sub

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4545441034469376 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzprobeanalyze Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x75687aa3a8c...

CVE-2020-36971: Stack-based Buffer Overflow

Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...

CVE-2025-15467

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

CVE-2026-1361

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

Delta Electronics ASDA-Soft 安全漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics China. The Delta Electronics ASDA-Soft suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

CVE-2025-15467: Out-of-bounds Write

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

Improper validation of PBMAC1 parameters in PKCS#12 MAC verification

Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial o...

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

AZL-75261 CVE-2025-9820 affecting package gnutls for versions less than 3.8.3-8

A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...

UBUNTU-CVE-2025-9820

A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...

CVE-2025-9820

A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=4951915732729856 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address:...

wasmer:universal_singlepass: Stack-buffer-overflow in wasmer_vm::trap::traphandlers::raise_lib_trap

Detailed Report: https://oss-fuzz.com/testcase?key=5117047762911232 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalsinglepass Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7a30876adc08 Crash State:...

CVE-2026-0792

ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this...

CVE-2026-0791

ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this...

openssl:pkcs12: Stack-buffer-overflow in kdf_pbkdf2_derive

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4546542626471936 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: pkcs12 Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 5 Crash Address:...