inchi:inchi_input_fuzzer: Stack-buffer-overflow in set_stereo_parity

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4638498798239744 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7d7fcdb01e78...

Espeak RemoveEnding Function DoS

The vulnerability of the RemoveEnding function in the Espeak speech synthesizer is related to stack buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-50809

A stack buffer overflow vulnerability exists in the mt_7615.ko wireless driver of certain Sonos smart speakers, including Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five . The flaw stems from the driver's failure to properly validate an information element during a WPA2 four-way handshake n...

json-c: Buffer Overflow

Background json-c is a JSON implementation in C. Description Please review the CVE identifier referenced below for details. Impact A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit. Workaround There is no known workaround at this tim...

DEBIAN-CVE-2024-7538

oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

gdal:gdal_vector_translate_fuzzer: Stack-buffer-overflow in OGRMiraMonLayer::TranslateFieldsValuesToMM

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6479142315425792 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

OSV-2024-695 Stack-buffer-overflow in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

SUSE SLED15: espeak-ng / espeak-ng-compat / espeak-ng-compat-devel / etc (SUSE-SU-2024:2632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2632-1 advisory. - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 ...

edk2:TestPeiUsb: Stack-buffer-overflow in PeiUsbGetAllConfiguration

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6213046417555456 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestPeiUsb Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x78ace72009d8...

SUSE-SU-2024:2632-1 Security update for espeak-ng

This update for espeak-ng fixes the following issues: - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 - CVE-2023-49991: Fixed stack-buffer-underflow exists in the function CountVowelPosition in synthdata.c bsc1218006 - CVE-2023-49992: Fixed...

tarantool:luaL_loadbuffer_fuzzer: Stack-buffer-overflow in narrow_conv_backprop

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6250635821907968 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Cras...

flac:fuzzer_tool_flac: Stack-buffer-overflow in FLAC__stream_encoder_init_ogg_file

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6171877295325184 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: Stack-buffer-overflow READ 13 Crash Address: 0xf661281c...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6529417518579712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

CVE-2024-6874

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

CVE-2024-6874

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

AutomationDirect P3-550E Buffer Overflow

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

AutomationDirect P3-550E Buffer Overflow

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

wireshark:fuzzshark_udp_port-dns: Stack-buffer-overflow in header_equal

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4772791992254464 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkudpport-dns Job Type: libfuzzerasanwireshark Platform Id: linux...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_vvc_parse_nalu_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4805819644837888 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x799552c12e30 Crash Stat...

TP-LINK Tapo C210 Stack Buffer Overflow Vulnerability

TP-LINK Tapo C210 is a webcam device from China P&L TP-LINK. The TP-LINK Tapo C210 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device...