CVE-2020-17541

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

CVE-2020-17541: Out-of-bounds Write

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

CVE-2021-29665

The CVE-2021-29665 issue affects IBM Application Gateway. The connected sources confirm a stack-based buffer overflow caused by improper bounds checking, enabling local attackers to execute arbitrary code with elevated privileges. Affected product: IBM Application Gateway (reported as 1.0 in IBM’...

CVE-2021-29665: Out-of-bounds Write

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges...

PT-2021-3241

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access version 20.07 Description The issue is related to a stack-based buffer overflow in the IBM Security Verify Access system, caused by improper bounds checking. This could allow a remote attacker to elevate privileges o...

Stack-based Buffer Overflow in falconchristmas/fpp

✍️ Description Hi, there is a stack based buffer overflow in https://github.com/FalconChristmas/fpp/blob/f4a1621c8be15a41305269830b700a2b5443aa0f/src/command.cL131 : When ./fpp is running it can send commands to ./fppd, a daemon that runs a main loop and listen for incoming socket connections : In...

CentOS 8 : python38:3.8 (CESA-2021:1879)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1879 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python-lxml: mXSS due to the use of improper parser...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

CVE-2021-27494: Stack-based Buffer Overflow

Datakit Software libraries CatiaV53dRead, CatiaV63dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing STP files. This could result in a stack-based buffer overflow. An attacker could leverage this...

Siemens JT2Go and Teamcenter Visualization

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Untrusted Pointer Dereference, Out-of-bounds Read, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

CVE-2021-32458: Out-of-bounds Write

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to...

PT-2021-20216

Name of the Vulnerable Software and Affected Versions GattLib version 0.3-rc1 Description The issue is a stack-based buffer over-read in the get device path from mac function located in dbus/gattlib.c. Recommendations For GattLib version 0.3-rc1, consider restricting access to the get device path...

CVE-2021-33590: Out-of-bounds Read

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

ALPINE-CVE-2021-3527

A flaw was found in the USB redirector device usb-redir of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array VLA on the stack...

CVE-2021-30472

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value...

CVE-2021-30472

CVE-2021-30472 affects PoDoFo 0.9.7. A stack-based buffer overflow is possible in PdfEncryptMD5Base::ComputeOwnerKey (PdfEncrypt.cpp) due to an improper check of the keyLength value. Documented across multiple feeds (NVD entry, CNVD/OSV entries, OSV Ubuntu/Debian, Alpine Linux, Nessus plugin) wit...

CVE-2021-3527

A flaw was found in the USB redirector device usb-redir of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array VLA on the stack...

CVE-2021-22898

A flaw was found in the way curl handled telnet protocol option for sending environment variables, which could lead to sending of uninitialized data from a stack-based buffer to the server. This issue leads to potentially revealing sensitive internal information to the server using a clear-text...