PT-2021-7823 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill affected versions not specified Description: The issue is related to a memory boundary error in the HandleFileArg function of the Xmill XML compression tool when processing an XML file. This can be exploited by a local attacker to execu...

Juniper Networks SBR Carrier Service Provider EAP Protocol Code Execution

The vulnerability of the EAP protocol implementation in Juniper Networks SBR Carrier’s service provider server arises due to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by sending specially crafted packets...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LoadVoice

Detailed Report: https://oss-fuzz.com/testcase?key=5966373875482624 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fa6f0969198 Crash State: LoadVoice LoadVoiceVarian...

OSV-2021-1113 Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962 Crash type: Stack-buffer-overflow READ 8 Crash state: getoid parseobjectid parseasntype...

PT-2021-3776

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue is related to a buffer overflow on the stack when checking passwords, which could allow a remote attacker to cause a denial of service or execu...

PT-2021-27695

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash involves the functions getoid, parse objectid, and parse asntype. No information is...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in getoid

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4817499223883776 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpmibfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

OSV-2021-1110 Stack-buffer-overflow in TranslateWord2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36932 Crash type: Stack-buffer-overflow WRITE 1 Crash state: TranslateWord2 TranslateClause SpeakNextClause...

PT-2021-27694

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions TranslateWord2, TranslateClause, and...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateWord2

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6035710980259840 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address...

FATEK Automation FvDesigner Stack Buffer Overflow Vulnerability

FATEK Automation FvDesigner, a human-computer interaction device from FATEK, has a security vulnerability in FATEK Automation FvDesigner 1.5.88 and earlier versions that could be exploited to execute arbitrary code...

ALPINE-CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

OSV-2021-1099 Stack-buffer-overflow in ot::StringFind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36830 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::StringFind ot::Coap::Message::AppendUriPathOptions otCoapMessageAppendUriPathOptions...

PT-2021-27688

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, as indicated by a crash report. The crash involves the Coap::Message::AppendUriPathOptions function...

CVE-2021-22925

curl supports the "-t" command line option, known as "CURLOPTTELNETOPTIONS"in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending "NEWENV" variables, libcurlcould be made to pass on uninitialized data from a stack...

CVE-2021-37231

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

Stack overflow

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-37231: Out-of-bounds Write

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-37231

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-37231

CVE-2021-37231 : A stack-buffer-overflow in Atomicparsley 20210124.204813.840499f occurs via APar_readX() in src/util.cpp while parsing a crafted MP4 file due to a missing boundary check. This affects the AtomicParsley component and was discussed in multiple advisories. The vulnerability’s impact...