CVE-2021-30566

CVE-2021-30566 affects Chromium-based web engines (Chrome/Chromium) with a stack buffer overflow in the Printing component prior to 92.0.4515.107. The flaw could be triggered by a crafted HTML page and, if a renderer process is compromised, may allow remote code execution or other impact as descr...

openthread:ot-cli-received-fuzzer: Stack-buffer-overflow in ot::StringFind

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5114492882124800 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ot-cli-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1...

CVE-2021-30566: Out-of-bounds Write

Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page...

CVE-2021-37164

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a...

OSV-2021-1085 Stack-buffer-overflow in strcat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36743 Crash type: Stack-buffer-overflow WRITE Crash state: strcat prvTidystrrep tidyMessageCreateInitV...

Debian DLA-2725-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2725 advisory. Several security vulnerabilities have been discovered in lrzip, a compression program. Heap-based and stack buffer overflows, use-after-free and infinite loops wou...

PT-2021-27686

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by the crash type. The crash state involves functions such as strcat, prvTidystrrep,...

tidy-html5:tidy_xml_fuzzer: Stack-buffer-overflow in strcat

Detailed Report: https://oss-fuzz.com/testcase?key=5067820705644544 Project: tidy-html5 Fuzzing Engine: honggfuzz Fuzz Target: tidyxmlfuzzer Job Type: honggfuzzasantidy-html5 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffff7f6cc20 Crash State: strcat prvTidystrrep...

Backdoor.Win32.Nbdd.bgz Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6fab73bf104c6a9211b94f9559faa134.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Nbdd.bgz Vulnerability: Remote Stack Buffer Overflow Description: NetBotAttacker VIP...

OSV-2021-1048 Stack-buffer-overflow in INDEX_ORDERLY_RAM_Marshal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36476 Crash type: Stack-buffer-overflow READ 4 Crash state: INDEXORDERLYRAMMarshal PERSISTENTALLMarshal TPM2PersistentAllStore...

PT-2021-27667

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state includes INDEX ORDERLY RAM Marshal, PERSISTENT ALL Marshal, and TPM2...

libtpms:fuzz: Stack-buffer-overflow in INDEX_ORDERLY_RAM_Marshal

Project: https://github.com/stefanberger/libtpms.git Detailed Report: https://oss-fuzz.com/testcase?key=6390624336084992 Project: libtpms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanlibtpms Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

Chromium: CVE-2021-30566 Stack buffer overflow in Printing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

FreeBSD : chromium -- multiple vulnerabilities (76487640-ea29-11eb-a686-3065ec8fd3ec)

Chrome Releases reports : This release contains 35 security fixes, including : - 1210985 High CVE-2021-30565: Out of bounds write in Tab Groups. Reported by David Erceg on 2021-05-19 - 1202661 High CVE-2021-30566: Stack buffer overflow in Printing. Reported by Leecraso and Guang Gong of 360 Alpha...

Google Chrome Stack Buffer Overflow Vulnerability (CNVD-2021-62168)

Chrome is a web browsing tool developed by Google.A stack buffer overflow vulnerability exists in Printing in versions prior to Google Chrome 92.0.4515.107. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash...

RHEL 8 : shim and fwupd (RHSA-2021:2790)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2790 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...

[ASA-202107-47] chromium: multiple issues

Arch Linux Security Advisory ASA-202107-47 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...

CVE-2019-25050

CVE-2019-25050 affects netCDF in GDAL 2.4.2 through 3.0.4. The issue is a stack-based buffer overflow in two code paths: nc4_get_att (invoked via nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (invoked from the netCDFDataset destructor). The connected documents consistently describe the ...

OSV-2021-1033 Stack-buffer-overflow in unicodize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36312 Crash type: Stack-buffer-overflow WRITE 1 Crash state: unicodize ntlmphase3 establishhttpproxypassthru...

Apache Traffic Server Cachekey Plugin Data Compromise

The vulnerability of the cachekey plugin in the Apache Traffic Server web server arises from an operation that occurs outside the buffer limits of the stack. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...