CVE-2021-26825: Integer Overflow or Wraparound

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

PT-2021-28054

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the processClientServerHello and processTLSBlock functions,...

Gitea Stack Buffer Overflow Vulnerability

Gitea is an open source community-driven clone of Gogs, a lightweight code hosting solution with a backend written in Go under the MIT license. A stack buffer overflow vulnerability exists in gitea versions 1.9.0 through 1.13.1. A remote attacker can exploit this vulnerability to cause a denial o...

Fortinet FortiWeb Stack Buffer Overflow Vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

ndpi:fuzz_process_packet: Stack-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4831031280664576 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 6 Crash Address: 0x7ffe7ac81f...

WS-2021-0135

In nDPI through 3.4, there is a stack-buffer-overflow in processClientServerHello...

wolfssl:cryptofuzz-disable-fastmath: Stack-buffer-overflow in Sha512Update

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6720505136676864 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-disable-fastmath Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash...

CVE-2021-3382

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service crash via vectors related to a file path...

CVE-2021-3382

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service crash via vectors related to a file path...

CVE-2021-3382

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service crash via vectors related to a file path...

CVE-2021-3382

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service crash via vectors related to a file path...

CVE-2021-3382

The CVE concerns Gitea versions 1.9.0 through 1.13.1, where a stack buffer overflow vulnerability allows remote attackers to cause a denial of service (crash) via vectors related to a file path. The connected data consistently describe this as a stack-based overflow affecting gitea in that versio...

Gitea buffer error vulnerability

Gitea is an open source community-driven clone of Gogs, a lightweight code hosting solution with a backend written in Go under the MIT license. A stack buffer overflow vulnerability exists in gitea versions 1.9.0 through 1.13.1. A remote attacker can exploit this vulnerability to cause a denial o...

PT-2021-20333

Name of the Vulnerable Software and Affected Versions: gitea versions 1.9.0 through 1.13.1 Description: The issue is a stack buffer overflow vulnerability that allows remote attackers to cause a denial of service, resulting in a crash, via vectors related to a file path. Recommendations: For gite...

CVE-2021-3382: Out-of-bounds Write

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service crash via vectors related to a file path...

CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25854

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

CVE-2020-25854

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

CVE-2020-25854

The CVE-2020-25854 issue affects Realtek RTL8195A Wi‑Fi Module before April 2020 (up to but excluding 2.08). The DecWPA2KeyData() path does not validate the size for internal veneers rt_arc4_crypt_veneer() or _AES_UnWRAP_veneer(), causing a stack buffer overflow that can enable remote code execut...

CVE-2020-25855

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...