OSV-2021-1740 Stack-buffer-overflow in pdfi_annot_draw_LE_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42783 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiannotdrawLEone pdfiannotdrawLE pdfiannotdrawLine...

Security update for libaom (moderate)

openSUSE Security Update: Security update for libaom Announcement ID: openSUSE-SU-2021:4170-1 Rating: moderate References: 1193356 1193365 1193366 1193369 Cross-References: CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36135 CVSS scores: CVE-2020-36129 SUSE: 5.5...

CVE-2021-21892

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Stack overflow

A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security...

Garrett Metal Detectors 缓冲区错误漏洞

Garrett Metal Detectors is a walk-in metal detector from Garrett, U.S.A. Garrett Metal Detectors is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a stack buffer overflow...

OSV-2021-1709 Stack-buffer-overflow in pdfi_do_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42454 Crash type: Stack-buffer-overflow WRITE Crash state: pdfidoimage pdfidoimageorform pdfiDo...

OSV-2021-1704 Stack-buffer-overflow in pdfi_create_iccbased

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42460 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdficreateiccbased pdficreatecolorspacebyarray pdfisetcolorspace...

Bentley View JT File Parsing Stack Buffer Overflow Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View JT file parsing stack buffer overflow remote code execution vulnerability is due to failure to properly validate the length of user-supplied data before copying it to the stack buffer. An attacker could exploit this vulnerabili...

OSV-2021-1694 Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42298 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcffdict...

OSV-2021-1689 Stack-buffer-underflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42294 Crash type: Stack-buffer-underflow WRITE 1 Crash state: readxref pdfireadxref pdfisetinputstream...

OSV-2021-1688 Stack-buffer-overflow in pdfi_annot_draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42329 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiannotdraw pdfidoannotations pdfipagerender...

Backdoor.Win32.Ncx.b Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/991c1f02c809cee860cb712896a45338B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ncx.b Vulnerability: Remote Stack Buffer Overflow Description: The malware listens o...

PT-2021-22359 · Ibm · Ibm Spectrum Protect Client

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Client versions 7.1 through 8.1 Description: The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. A local attacker could exploit this and cause a denial of service. Recommendations: F...

Fortinet FortiWeb Buffer Overflow Vulnerability (CNVD-2021-99680)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A buffer overflow vulnerability exists, whi...

The vulnerability of the FUN_80046eb4 (/formSetPortTr) function in the wireless router software from D-Link, DIR-809, allows a hacker to execute any code in the target system.

The vulnerability of the FUN80046eb4 /formSetPortTr function of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system using the created POST request...

OSV-2021-1670 Dynamic-stack-buffer-overflow in zend_calc_live_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42156 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: zendcalcliveranges passtwo zendcompilefuncdecl...

Bentley View Stack Buffer Overflow Vulnerability

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a stack buffer overflow vulnerability that exists due to a boundary error in the handling of untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2021-20038

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...

Huawei HarmonyOS stack buffer overflow vulnerability (CNVD-2021-99968)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit this vulnerability to cause the device to beco...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99966)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...