CVE-2021-41459

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41456

The vulnerability CVE-2021-41456 affects GPAC’s MP4Box (v1.0.1). The issue is a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1004 triggered by the szXmlTo parameter, leading to a denial of service. Connected references corroborate the GPAC context and CVE listing; Debi...

CVE-2021-41459

GPAC MP4Box (v1.0.1) contains a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1008 (szXmlFrom) leading to DoS. The issue is documented as CVE-2021-41459. Debian/DSA-5411 notes the fixed version for bullseye is gpac 1.0.1+dfsg1-4+deb11u2, indicating a package upgrade as ...

CVE-2021-41459

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41457

CVE-2021-41457 affects GPAC MP4Box 1.1.0 with a stack buffer overflow in nhmldmx_init_parsing (src/filters/dmx_nhml.c) that leads to denial of service. Multiple connected sources confirm GPAC/MP4Box exposure and provide remediation guidance. Debian advisory notes fixed delivery in GPAC 1.0.1+dfsg...

CVE-2021-41457

There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmxnhml.c in nhmldmxinitparsing which leads to a denial of service vulnerability...

CVE-2021-41457

There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmxnhml.c in nhmldmxinitparsing which leads to a denial of service vulnerability...

CVE-2021-41459

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41456

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1004 in the nhmldmxsendsample function szXmlTo parameter which leads to a denial of service vulnerability...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreSSL Stack Buffer Overflow Vulnerability

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

OSV-2021-1368 Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196 Crash type: Stack-buffer-overflow READ Crash state: dispatchprinterror internalexrparseheader exrstartread...

Microsoft Windows cmd.exe - Stack Buffer Overflow

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Date: 15/09/2021 Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line...

Microsoft Windows cmd.exe - Stack Buffer Overflow Vulnerability

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line interpreter for t...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c, allowing an attacker to cause code Execution...

SWFTools Stack Buffer Overflow Vulnerability (CNVD-2021-73197)

SWFTools is a collection of utilities that work with Adobe Flash files SWF files. SWFTools has a stack buffer overflow vulnerability that can be exploited by attackers to cause code execution...

GPAC Stack Buffer Overflow Vulnerability (CNVD-2021-82977)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

FAAD2 Stack Buffer Overflow Vulnerability (CNVD-2021-89950)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

Security Bulletin: Vulnerability in kernel affects Power Hardware Management Console (CVE-2018-14633)

Summary Power Hardware Management Console is affected by security vulnerabilities in the Linux Kernel. Power Hardware Management Console has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-14633 DESCRIPTION: A security flaw was found in the chapservercomputemd5 function in the...