OSV-2022-719 Stack-buffer-overflow in gs_glyph_data_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafromstring copiedtype1subrdata gstype2interpret...

PT-2022-37188

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions gs glyph data from string, copied type1 subr...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_glyph_data_from_string

Detailed Report: https://oss-fuzz.com/testcase?key=6152113700339712 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7ffcf5252b40 Crash State:...

GLSA-202208-30 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-30 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CVE-2022-28750 Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector

Zoom On-Premise Meeting Connector Zone Controller ZC before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be...

SUSE: Security Advisory (SUSE-SU-2022:2712-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for u-boot (SUSE-SU-2022:2661-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for u-boot (SUSE-SU-2022:2654-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2661-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2654-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor.Win32.Jokerdoor MVID-2022-0628 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/783a191e7944e1af84ec0fa96d933f30.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jokerdoor Vulnerability: Remote Stack Buffer Overflow Description: The...

SUSE-SU-2022:2661-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation bsc1201745. - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command bsc1201214...

SUSE-SU-2022:2654-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command bsc1201214...

SUSE-SU-2022:2653-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation bsc1201745. - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command bsc1201214...

TCL LinkHub Mesh Wi-Fi set_port_fwd_rule Function Stack Buffer Overflow Vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. The TCL LinkHub Mesh Wi-Fi setportfwdrule feature suffers from a stack buffer overflow vulnerability, which can be exploited by attackers to cause a stack buffer overflow...

CVE-2022-35222 HiCOS Citizen verification component - Stack Buffer Overflow

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service...

Alpha7 PC Loader Buffer Overflow

The vulnerability of the Alpha7 PC Loader software arises from buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code...

libredwg:llvmfuzz: Stack-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5984443780694016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2136)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2161)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...