Stack overflow

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "AESUnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

CVE-2020-27302

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

CVE-2020-27301

Realtek RTL8710 (and other Ameba-based devices) disclose a stack buffer overflow vulnerability that can enable remote code execution via the AES_UnWRAP path during WPA2 4-way handshake. An attacker within Wi‑Fi range can craft an Encrypted GTK to exploit the flaw, potentially taking control of th...

Exploit for Classic Buffer Overflow in Msi Dragon_Center

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LP...

LibRaw stack buffer overflow vulnerability (CNVD-2021-43527)

LibRaw is a library for reading RAW files acquired from digital cameras. A stack buffer overflow vulnerability exists in LibRaw::identifyprocessdngfields in identify.cpp in versions of LibRaw prior to 0.20.1. No detailed vulnerability details are provided at this time...

CVE-2020-24870

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp...

UBUNTU-CVE-2020-24870

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp...

Stack overflow

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp...

CVE-2020-24870

CVE-2020-24870 affects LibRaw: a stack-based buffer overflow in LibRaw::identify_process_dng_fields (identify.cpp). Public details confirm the vulnerability in LibRaw prior to version 0.20.1. Impact per connected advisory notes potential code execution or crash. Remediation/fix: upgrade LibRaw to...

OSV-2021-821 Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34816 Crash type: Stack-buffer-overflow WRITE 6 Crash state: jsoncons::bson::decimal128tochars jsoncons::bson::basicbsonparserjsoncons::binarystreamsource, std::1::allo...

Backdoor.Win32.Delf.acz Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/065d89c63fa1057de98c727d4b044b98.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.acz Vulnerability: Remote Stack Buffer Overflow SEH Description: The malware...

Unspecified Vulnerability in ZeroMQ

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ server versions prior to 4.3.3, which stems from a vulnerability that allows a malicious client to cause a stack buffer overflow on the server by sending a carefully crafted topic...

CVE-2021-29665

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges...

Stack overflow

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges...

The vulnerability of the function DJVU::DjVuDocument::get_djvu_file() in the DjVuLibre library and utilities allows a perpetrator to execute arbitrary code.

The vulnerability of the function DJVU::DjVuDocument::getdjvufile in the DjVuLibre library and utilities is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Stack Buffer Overflow Vulnerability in Several Tenda AC Routers

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. A number of Tengda AC routers have stack buffer overflow vulnerability, which can be exploited by attackers to cause denial-of-servic...

CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...