PT-2021-28109

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash, specifically a WRITE crash. The crash state involves functions such as tvb memcpy, composite memcpy,...

PT-2021-30901

Уязвимость процесса GPU Process веб-браузера Google Chrome вызвана переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

wireshark:fuzzshark_ip: Stack-buffer-overflow in tvb_memcpy

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5444637764485120 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

fmt:named-arg-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5701202266423296 Project: fmt Fuzzing Engine: afl Fuzz Target: named-arg-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f294bcd3cbf Crash State:...

PT-2021-2017

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 88.0.4324.182 Description The issue is caused by a stack buffer overflow in the GPU Process of Google Chrome. This can allow a remote attacker to potentially perform out of bounds memory access via a crafted HTM...

PT-2021-2021

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 88.0.4324.182 Description The issue is a stack buffer overflow in the Data Transfer component of Google Chrome on Linux, allowing a remote attacker to perform out of bounds memory access via a crafted HTML page...

CVE-2020-2501 Stack Buffer Overflow in Surveillance Station

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3...

libreoffice:pptfuzzer: Stack-buffer-overflow in int rtl::str::getLength<char>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6535927918886912 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

suricata:fuzz_sigpcap: Stack-buffer-overflow in SetupU8Hash

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5069466633371648 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

CVE-2020-24870

A stack buffer overflow vulnerability was found in LibRaw. This flaw allows a malicious user to send a crafted image that, when parsed by an application linked to LibRaw, leads to a denial of service or potential code execution...

OSV-2021-386 Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::Coap::Message::AppendUintOption ot::Coap::Message::AppendBlockOption otCoapMessageAppendBlock2Option...

PT-2021-28082

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the involvement of Coap::Message::AppendUintOption,...

CVE-2021-20236

A flaw was found in the ZeroMQ server. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

openthread:cli-uart-received-fuzzer: Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5806975818530816 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: cli-uart-received-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...

OSV-2021-361 Stack-buffer-overflow in add_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30774 Crash type: Stack-buffer-overflow WRITE Crash state: addfile strfilenamecb handleoption...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in iasecc_process_fci

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4726860867043328 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

fio:fuzz_parseini: Stack-buffer-overflow in add_file

Detailed Report: https://oss-fuzz.com/testcase?key=5172468690059264 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fc5d1ac7820 Crash State: addfile strfilenamecb handleoption Sanitizer:...

Gitea 1.9.0 < 1.13.2 DoS Vulnerability

Gitea is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

fwupd:dfuse_fuzzer: Stack-buffer-overflow in g_strdup

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=6262786369912832 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: dfusefuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffdf0cd8cb2...

Arbitrary Code Execution

connman is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow that can be used to execute code by network adjacent attackers...