Tenda AC18 Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a stack buffer overflow vulnerability, which stems from the discovery of a deviceMac parameter via ip/goform/addWifiMacFilter...

quickjs:fuzz_eval: Dynamic-stack-buffer-overflow in js_bigfloat_parseFloat

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5128737130086400 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzeval Job Type: aflasanquickjs Platform Id: linux Crash Type: Dynamic-stack-buffer-overflo...

SUSE CVE-2024-40978

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

OSV-2024-655 Stack-buffer-overflow in UnrollChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70395 Crash type: Stack-buffer-overflow READ 1 Crash state: UnrollChunkyBytes CachedXFORM cmsDoTransform...

curl: CVE-2024-6874: macidn punycode buffer overread

The libcurl at commit 58772b0e082eda333e0a5fc8fb0bc7f17a3cd99c contained a stack-buffer overread in the function macidntoascii that could be triggered when the host of a URL was converted to punycode. The root cause was in the function uidnanameToASCIIUTF8, which left the output buffer unterminat...

Tenda AC18 security vulnerabilities

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a stack buffer overflow vulnerability, which stems from the discovery of a deviceMac parameter via ip/goform/addWifiMacFilter...

Tenda AX1806 security vulnerabilities

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack buffer overflow vulnerability exists in the Tenda AX1806 sub519F4 function, which originates when /goform/SetStaticRouteCfg fails to properly validate the length and size of the input data, and can be exploited by ...

lcms:cms_virtual_profile_fuzzer: Stack-buffer-overflow in UnrollChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5344770998730752 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsvirtualprofilefuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

DEBIAN-CVE-2024-40978

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

CVE-2024-40978

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

SUSE-SU-2024:2426-1 Security update for libeconf

This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econfwriteFile' function bsc1211078. - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'readfile' function...

CVE-2024-40978 scsi: qedi: Fix crash while reading debugfs attribute

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33395)

The D-Link DAP-2622 is a wireless router from China-based AUO D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33399)

The D-Link DAP-2622 is a wireless router from China-based AUO D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33398)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33397)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33394)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-1360 Stack Buffer Overflow Vulnerability (CNVD-2024-33377)

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Vulnerability (CNVD-2024-33410)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 suffers from a stack buffer overflow vulnerability (CNVD-2024-33396)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...