7301 matches found
CVE-2023-49236
CVE-2023-49236 affects TRENDnet TV-IP1314PI devices running version 5.5.3 200714. A stack-based buffer overflow occurs due to lack of length validation when parsing a user-entered scale field in the RTSP playback function of the internal module (davinci), enabling arbitrary command execution. Mul...
CVE-2023-7218
Summary: CVE-2023-7218 affects Totolink N350RT, specifically the loginAuth function in /cgi-bin/cstecgi.cgi. The vulnerability is a stack-based buffer overflow triggered by manipulating the password parameter, with remote exploit potential in the affected firmware version 9.3.5u.6139_B202012. Mul...
CVE-2023-38583
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-35703
Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-38583
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
Stack overflow
Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-35703
Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-35703
Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-35702
Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-38583
GTKWave (gtkwave) is affected by CVE-2023-38583 due to a stack-based buffer overflow in the lxt2_rd_expand_integer_to_bits function, exploitable by opening a crafted .lxt2 file. Public advisories indicate the fix is to upgrade GTKWave to a newer upstream version (e.g., 3.3.118 or newer). Debian s...
CVE-2023-38583
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-38583
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
Stack overflow
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2024-0321
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2024-0321 Stack-based Buffer Overflow in gpac/gpac
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
GTKWave LXT2 lxt2_rd_expand_integer_to_bits stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2023-1827 GTKWave LXT2 lxt2rdexpandintegertobits stack-based buffer overflow vulnerability January 8, 2024 CVE Number CVE-2023-38583 SUMMARY A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A...
GTKWave FST LEB128 varint stack-based buffer overflow vulnerabilities
Talos Vulnerability Report TALOS-2023-1783 GTKWave FST LEB128 varint stack-based buffer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-35704,CVE-2023-35703,CVE-2023-35702 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of...
CVE-2023-7214
Summary: CVE-2023-7214 affects Totolink N350RT 9.3.5u.6139_B20201216. The issue is a stack-based buffer overflow in the main function of the API endpoint /cgi-bin/cstecgi.cgi?action=login when processing the v8 argument, which can be exploited remotely. The vulnerability impact is described as ar...
CVE-2023-7213
CVE-2023-7213 affects Totolink N350RT (9.3.5u.6139_B20201216) in the HTTP POST Request Handler, specifically the function main at /cgi-bin/cstecgi.cgi?action=login&flag=1. The vulnerability arises from manipulating the argument v33, causing a stack-based buffer overflow that can be triggered remo...
CVE-2024-22086
handlerequest in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution...