9614 matches found
openthread:cli-uart-received-fuzzer: Stack-buffer-overflow in ot::Coap::Message::AppendUintOption
Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5806975818530816 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: cli-uart-received-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...
OSV-2021-361 Stack-buffer-overflow in add_file
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30774 Crash type: Stack-buffer-overflow WRITE Crash state: addfile strfilenamecb handleoption...
opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in iasecc_process_fci
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4726860867043328 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
fio:fuzz_parseini: Stack-buffer-overflow in add_file
Detailed Report: https://oss-fuzz.com/testcase?key=5172468690059264 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fc5d1ac7820 Crash State: addfile strfilenamecb handleoption Sanitizer:...
Gitea 1.9.0 < 1.13.2 DoS Vulnerability
Gitea is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
fwupd:dfuse_fuzzer: Stack-buffer-overflow in g_strdup
Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=6262786369912832 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: dfusefuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffdf0cd8cb2...
Arbitrary Code Execution
connman is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow that can be used to execute code by network adjacent attackers...
freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr
Detailed Report: https://oss-fuzz.com/testcase?key=5423237502730240 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f192fe3dca0 Crash State: libcppstrchr...
Integer overflow
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...
CVE-2021-26825
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...
CVE-2021-26825
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...
CVE-2021-26825
CVE-2021-26825 affects Godot Engine up to v3.2. The vulnerability is in ImageLoaderTGA::load_image(), where the buffer_size is computed as (tga_header.image_width * tga_header.image_height) * pixel_size, causing a dynamic stack buffer overflow. Impact: potential code execution and/or crash, with ...
CVE-2021-26825
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...
OSV-2021-304 Stack-buffer-overflow in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393 Crash type: Stack-buffer-overflow WRITE 6 Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...
CVE-2021-26825: Integer Overflow or Wraparound
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...
PT-2021-28054
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the processClientServerHello and processTLSBlock functions,...
Gitea Stack Buffer Overflow Vulnerability
Gitea is an open source community-driven clone of Gogs, a lightweight code hosting solution with a backend written in Go under the MIT license. A stack buffer overflow vulnerability exists in gitea versions 1.9.0 through 1.13.1. A remote attacker can exploit this vulnerability to cause a denial o...
Fortinet FortiWeb Stack Buffer Overflow Vulnerability
Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...
ndpi:fuzz_process_packet: Stack-buffer-overflow in processClientServerHello
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4831031280664576 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 6 Crash Address: 0x7ffe7ac81f...