OSV-2023-467 Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636 Crash type: Stack-buffer-overflow WRITE 1 Crash state: SetPitchGradient calcpitches CalcPitches...

PT-2023-35863 · Git +1 · Espeak-Ng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 1, and the crash state...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6584117345779712 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7a3142e929...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in SetPitchGradient

Detailed Report: https://oss-fuzz.com/testcase?key=5542902395437056 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x784b7b4ccf94 Crash State: SetPitchGradient...

mupdf:pdf_fuzzer: Stack-buffer-underflow in bmp_read_image

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6423128616861696 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7ffc26b0b002...

CVE-2023-22652 Stack buffer overflow in "read_file" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...

net-snmp:snmp_print_var_fuzzer: Stack-buffer-overflow in sprint_realloc_hinted_integer

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5185505302806528 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpprintvarfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

CVE-2023-32181 Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2...

Fedora 37 : editorconfig (2023-6e5d4757df)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6e5d4757df advisory. Security fix for CVE-2023-0341: update to 0.12.6 close RHBZ2162811 Tenable has extracted the preceding description block directly from the Fedora...

Siemens SCALANCE POST Request DoS

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches lies in the overflow of the stack-based buffer. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

CVE-2022-46658

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution...

OSV-2023-407 Stack-buffer-overflow in DwaCompressor_readChannelRules

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59070 Crash type: Stack-buffer-overflow READ Crash state: DwaCompressorreadChannelRules DwaCompressoruncompress internalexrundodwaa...

PT-2023-35833 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include the DwaCompressor readChannelRules and DwaCompressor uncompress...

Cisco Small Business Series Switches Web Interface Code Execution

The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches is related to the possibility of buffer overflow attacks based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

openexr:openexr_exrcorecheck_fuzzer: Stack-buffer-overflow in DwaCompressor_readChannelRules

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6514127842181120 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Stack-buffer-overfl...

NETGEAR RAX30 Router Buffer Overflow

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of proper verification of the length of user data before it is copied into the fixed-length stack buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context using...

NETGEAR RAX30 soap_serverd Authentication Bypass Code Execution

The vulnerability of the binary file soapserverd in NETGEAR RAX30 router microprogramming systems arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and execute arbitrary code...

OSV-2023-395 Stack-buffer-overflow in sc_path_print

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58932 Crash type: Stack-buffer-overflow READ 1 Crash state: scpathprint scselectfile cflexdeletefile...

PT-2023-35826 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state involves several functions: sc path print, sc select file, and cflex delete...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in sc_path_print

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5206337630633984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...