9537 matches found
CVE-2020-20486: Out-of-bounds Write
IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...
OSV-2021-1177 Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37716 Crash type: Stack-buffer-overflow READ Crash state: bool draco::FloatPointsTreeDecoder::DecodePointClouddraco::PointAttributeVector draco::KdTreeAttributesDecoder::DecodeDataNeededByPortableTransforms...
PT-2021-27729
Name of the Vulnerable Software and Affected Versions: draco affected versions not specified Description: The issue is related to a stack-buffer-overflow read crash in the draco library. The crash occurs in the draco::FloatPointsTreeDecoder::DecodePointCloud function, which is called by...
draco:draco_pc_decoder_fuzzer: Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector
Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5992473277628416 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracopcdecoderfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...
DOPSoft Stack Buffer Overflow Vulnerability
DOPSoft is a Human Machine Interface HMI programming software from Delta Electronics. A stack buffer overflow vulnerability exists in DOPSoft 4.00.11 and earlier versions. The vulnerability can be exploited by an attacker to execute arbitrary code via a specially crafted project file...
openSUSE 15 Security Update : libspf2 (openSUSE-SU-2021:1187-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1187-1 advisory. - Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code...
CVE-2020-18734
A stack buffer overflow in /ddsi/qbitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...
CVE-2020-18734
A stack buffer overflow in /ddsi/qbitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...
PT-2021-10229
Name of the Vulnerable Software and Affected Versions: Eclipse IOT Cyclone DDS Project version 0.1.0 Description: A stack buffer overflow in the /ddsi/q bitset.h file causes the DDS subscriber server to crash. Recommendations: For Eclipse IOT Cyclone DDS Project version 0.1.0, consider disabling...
CVE-2020-18734: Out-of-bounds Write
A stack buffer overflow in /ddsi/qbitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...
D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67523)
The D-Link DAP-2020 is a wireless N access point. The D-Link DAP-2020 is vulnerable to a stack buffer overflow vulnerability caused by incorrect boundary checking of the var:menu parameter in the webproc endpoint, which could be exploited by an attacker to cause a buffer overflow and execute...
D-Link DAP-2020 Stack Buffer Overflow Vulnerability
The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by incorrect boundary checking of the var:page parameter in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execu...
D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67522)
The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by a failure to properly boundary check in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execute arbitrary code...
PT-2021-4198
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 93.0.4577.82 Description A stack buffer overflow in the ANGLE library of Google Chrome allows a remote attacker to potentially exploit stack corruption via a crafted HTML page, which could lead to a denial of...
D-Link DAP-2020 security vulnerability
The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by incorrect boundary checking of the var:page parameter in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execu...
OPENSUSE-SU-2021:2764-1 Security update for libsndfile
This update for libsndfile fixes the following issues: - CVE-2018-13139: Fixed a stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact. bsc1100167 - CVE-2018-19432:...
Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices
Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits SDKs accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK...
PT-2021-30947
Уязвимость функции load path подсистемы безопасности PARSEC связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании...
PT-2021-3805
Name of the Vulnerable Software and Affected Versions Moxa EDR-810 affected versions not specified Description The issue is related to a buffer overflow in the stack of the Moxa EDR-810 switch's firmware. This could allow a remote attacker to execute arbitrary code. Recommendations At the moment,...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. An attacker who successfully tricks a user into using readelf to read a malicious file can exploit a stack buffer overflow and out-of-bounds write of malicious data supplied by the attacker and execute arbitrary code on the host OS...