OSV-2022-217 Stack-buffer-overflow in msgpack_sbuffer_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45208 Crash type: Stack-buffer-overflow READ Crash state: msgpacksbufferwrite flbpackmsgpacktojsonformat flbjsonfuzzer.c...

PT-2022-36860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the msgpack sbuffer write function, which is called by flb pack msgpack to...

clamav:clamav_dbload_PDB_fuzzer: Stack-buffer-overflow in load_regex_matcher

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5138577619550208 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

fio:fuzz_parseini: Stack-buffer-overflow in add_file

Detailed Report: https://oss-fuzz.com/testcase?key=4561698890055680 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f7d932b79c0 Crash State: addfile strfilenamecb handleoption Sanitizer:...

CVE-2022-25044

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

CVE-2022-25465

Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...

Stack overflow

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

libreoffice:hwpfuzzer: Stack-buffer-overflow in hcolor2str

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4518292339949568 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 14 Crash...

CVE-2022-25044

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

CVE-2022-25044

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

CVE-2022-25465

Espruino 2v11 release contains a stack buffer overflow in src/jsvar.c (jsvGetNextSibling). Root cause: a buffer overflow within the JS variable handling path. Documents do not specify exploit vectors, versions beyond 2v11, or concrete remediation; no exploitation details are provided. Remediation...

CVE-2022-25465

Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...

PT-2022-17060

Name of the Vulnerable Software and Affected Versions Espruino version 2v11.251 Description A stack buffer overflow issue was discovered in Espruino via the jsvNewFromString function in src/jsvar.c. Recommendations For Espruino version 2v11.251, consider restricting the use of the jsvNewFromStrin...

PT-2022-17315

Name of the Vulnerable Software and Affected Versions Espruino version 2v11 Description A stack buffer overflow issue was discovered in Espruino via the src/jsvar.c file, specifically in the jsvGetNextSibling function. Recommendations For Espruino version 2v11, consider restricting access to the...

CVE-2022-25044: Out-of-bounds Write

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

CVE-2022-25465: Out-of-bounds Write

Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Stack-buffer-overflow in msgpack_sbuffer_write

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4894251580784640 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...