OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

PT-2025-19365 · Git +1 · Openthread

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow read vulnerability. The crash state indicates the issue occurs within the Cli::Utils::OutputLine,...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

openthread:ot-cli-received-fuzzer: Stack-buffer-overflow in ot::Cli::Utils::OutputLine

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4906207129436160 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ot-cli-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...

D-Link DI-8100 Router Stack Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium sized network environments. A stack buffer overflow vulnerability exists in the D-Link DI-8100. The vulnerability stems from the authasp function in the /auth.asp file in the jhttpd component not effectively limitin...

The vulnerability of the libexpat library for analyzing XML files, related to buffer overflow in the stack, allows an attacker to execute arbitrary code on the target system.

The vulnerability of the libexpat library for analyzing XML files involves buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

PT-2025-55165

Уязвимость функции remove whitespace кластерного движка Corosync связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium sized network environments. A stack buffer overflow vulnerability exists in the D-Link DI-8100. The vulnerability stems from the authasp function in the /auth.asp file in the jhttpd component not effectively limitin...

The vulnerability of the Windows Telephony Service in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Telephony Service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a request to the server...

CVE-2025-3289

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

The vulnerability in the Wayland protocol for X.Org XWayland, which is related to the X.Org Server, a server for the X Window System, arises from buffer overflows in the stack. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

USN-7346-3 opensc vulnerabilities

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

PT-2025-15540 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: A stack-based buffer overflow in the Windows Telephony Service allows an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no...

PT-2025-15637

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020 affected versions not specified Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to insufficient boundary...

PT-2025-28638 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow write issue. The crash state involves the functions snap usedef, lj snap purge, and lj record ins...

tarantool:luaL_loadbuffer_fuzzer: Stack-buffer-overflow in snap_usedef

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6716030632394752 Project: tarantool Fuzzing Engine: afl Fuzz Target: luaLloadbufferfuzzer Job Type: aflasantarantool Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

CVE-2025-3196

A stack-buffer-overflow vulnerability was found in the Assimp::MD2Importer::InternReadFile function within the Assimp Library. This issue occurs when processing certain malformed files, leading to an out-of-bounds write and potential application crash. Mitigation Mitigation for this issue is eith...

CVE-2025-3166

CVE-2025-3166 affects code-projects Product Management System 1.0, specifically the search_item function in the Search Product Menu. The root cause is manipulation of the target argument leading to a stack-based buffer overflow. Local access is required to exploit, and the exploit has been disclo...

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure ICS is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from a stack buffer overflow that could lead to remote code execution...