ASB-A-199065614

In vorbisbookdecodevset of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2021-33265: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

CVE-2021-33267: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request...

CVE-2021-33271: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

CVE-2021-33274: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request...

CVE-2021-33266: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request...

CVE-2021-33268: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request...

CVE-2021-33269: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN8004776c in /formVirtualServ. This vulnerability is triggered via a crafted POST request...

CVE-2021-33270: Out-of-bounds Write

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request...

OSV-2021-1634 Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

PT-2021-30973

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in InterpretPhoneme

Detailed Report: https://oss-fuzz.com/testcase?key=6304601555468288 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7fd5897e18e0 Crash State: InterpretPhoneme...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in MatchRule

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5102054064914432 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

suricata:fuzz_predefpcap_aware: Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4685805960953856 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzpredefpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash...

OSV-2021-1631 Stack-buffer-overflow in TranslateNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41437 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber TranslateWord3 TranslateWord...

PT-2021-27917

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash state involves functions such as TranslateNumber, TranslateWord3, and TranslateWord. ...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateNumber

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6594718543249408 Project: espeak-ng Fuzzing Engine: afl Fuzz Target: ssml-fuzzer Job Type: aflasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

PT-2021-27915

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow error, specifically a WRITE 1 crash type. The crash state involves several functions: sprint realloc hinted...

Adobe XMP-Toolkit-SDK Buffer Overflow

The vulnerability of the Adobe XMP-Toolkit-SDK software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...