CVE-2022-23462

Vulnerability focus: IOWOW C utility library/persistent key/value store (versions ≤ 1.4.15) has a stack buffer overflow when parsing JSON numbers in scientific notation, enabling Denial of Service. The issue is addressed by the patch at commit a79d31e4cff1d5a08f665574b29fd885897a28fd in the maste...

OSV-2022-1065 Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52517 Crash type: Stack-buffer-overflow WRITE Crash state: Curloutputawssigv4 outputauthheaders Curlhttpoutputauth...

Tenda AC10 Stack Buffer Overflow Vulnerability

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by a failure of the addWifiMacFilter function to properly bounds check. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the...

Tenda AC10 Stack Buffer Overflow Vulnerability (CNVD-2023-50811)

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking in the formSetClientState function. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the system, ...

curl:curl_fuzzer_http: Stack-buffer-overflow in Curl_output_aws_sigv4

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5950791701889024 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0xffc44cc5...

gdal:filename_fuzzer: Stack-buffer-overflow in SENTINEL2Dataset::Open

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4834019741401088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: filenamefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0xffdf9bfc...

Tenda AC10 缓冲区错误漏洞

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by a failure of the addWifiMacFilter function to properly bounds check. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the...

OSV-2022-1049 Stack-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52397 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::suffixcheck AffixMgr::affixcheck AffixMgr::compoundcheck...

PT-2022-36682 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions:...

mysql-server:fuzz_initfile: Dynamic-stack-buffer-overflow in bin2decimal

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5173642132848640 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1...

hunspell:affdicfuzzer: Stack-buffer-overflow in AffixMgr::suffix_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4832068073029632 Project: hunspell Fuzzing Engine: afl Fuzz Target: affdicfuzzer Job Type: aflasanhunspell Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f0a1c290258...

OSV-2022-1046 Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52349 Crash type: Stack-buffer-overflow WRITE Crash state: Curloutputawssigv4 outputauthheaders Curlhttpoutputauth...

PT-2022-36681 · Git +1 · Curl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by the crash type 'Stack-buffer-overflow WRITE'. The crash state points to functions...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2571)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack Buffer Overflow

vim/vim is vulnerable to stack buffer overflow. The vulnerability exists in exfinally function of exeval.c which allows an attacker to execute arbitrary codes into the system...

PT-2022-7257 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a stack-buffer-overflow vulnerability via the put qpel fallback function in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service DoS using a crafted...

PT-2022-7256 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a stack-buffer-overflow in the put epel hv fallback function when handling unsigned short data types. This allows attackers to cause a Denial of Service DoS via a crafted video file...

cryptsetup:crypt2_load_fuzz: Stack-buffer-overflow in blkid_probe_set_value

Project: https://gitlab.com/cryptsetup/cryptsetup.git Detailed Report: https://oss-fuzz.com/testcase?key=4874390638821376 Project: cryptsetup Fuzzing Engine: libFuzzer Fuzz Target: crypt2loadfuzz Job Type: libfuzzerasancryptsetup Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

OSV-2022-1032 Stack-buffer-overflow in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52229 Crash type: Stack-buffer-overflow READ Crash state: checkcontenttypeandchangeprotocol checkcontenttypeandchangeprotocol ndpisearchhttptcp...

EulerOS Virtualization 3.0.6.6 : libtiff (EulerOS-SA-2022-2514)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component...