OSV-2022-39 Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

PT-2022-36976

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of the BZ2 decompress and BZ2 bzDecompress functions, as...

CVE-2021-44703: Stack-based Buffer Overflow

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a stack buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2021-38692: Buffer Copy without Checking Size of Input

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

CVE-2021-38691: Buffer Copy without Checking Size of Input

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

CVE-2021-38690: Buffer Copy without Checking Size of Input

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

CVE-2021-38689: Buffer Copy without Checking Size of Input

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

CVE-2021-38682: Buffer Copy without Checking Size of Input

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

Binaryen Stack Buffer Overflow Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen has a stack buffer overflow vulnerability in version 103, which originates when the software printf public function performs an operation in memory, and can be exploited by an attacker to cause...

CVE-2021-34941

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34892

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2018-14633

A flaw was found in the ISCSI target code in the Linux kernel. The flaw allows an unauthenticated, remote attacker to cause a stack buffer overflow of 17 bytes of the stack. Depending on how the kernel was compiled e.g. compiler, compile flags, and hardware architecture, the attack may lead to a...

PT-2022-5120

Name of the Vulnerable Software and Affected Versions QNAP QVR Elite versions prior to 2.1.4.0 QNAP QVR Pro versions prior to 2.1.3.0 QNAP QVR Guard versions prior to 2.1.3.0 Description The issue is related to a stack buffer overflow vulnerability in the memory, which can be exploited by a remot...

PT-2022-5125

Name of the Vulnerable Software and Affected Versions QNAP QVR Elite versions prior to 2.1.4.0 QNAP QVR Pro versions prior to 2.1.3.0 QNAP QVR Guard versions prior to 2.1.3.0 Description The issue is related to a stack buffer overflow vulnerability in the memory, which can be exploited by a remot...

PT-2022-5118

Name of the Vulnerable Software and Affected Versions QVR Elite versions prior to 2.1.4.0 QVR Pro versions prior to 2.1.3.0 QVR Guard versions prior to 2.1.3.0 Description A stack buffer overflow vulnerability has been reported to affect QNAP devices running QVR Elite, QVR Pro, and QVR Guard. If...

PT-2022-5119

Name of the Vulnerable Software and Affected Versions QNAP QVR Elite versions prior to 2.1.4.0 QNAP QVR Pro versions prior to 2.1.3.0 QNAP QVR Guard versions prior to 2.1.3.0 Description The issue is related to a stack buffer overflow in the memory, which can be exploited by a remote attacker to...

PT-2022-5117

Name of the Vulnerable Software and Affected Versions QVR Elite versions prior to 2.1.4.0 QVR Pro versions prior to 2.1.3.0 QVR Guard versions prior to 2.1.3.0 Description A stack buffer overflow vulnerability has been reported to affect QNAP devices running QVR Elite, QVR Pro, and QVR Guard. If...

freetype2:bzip2: Stack-buffer-overflow in BZ2_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4524321446428672 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: bzip2 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff9bceb706 Crash State: BZ2decompress BZ2bzDecompress...

Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 17.011.30207, 20.004.30020, or 21.011.20039. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier...

Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 17.011.30207, 20.004.30020, or 21.011.20039. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier ar...