CVE-2022-28550: Out-of-bounds Write

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

CVE-2022-28550

CVE-2022-28550 affects JHead 3.06. The vulnerability is a stack buffer overflow caused by copying into a fixed-size stack buffer when processing shellescape(), specifically when handling multiple &i or &o values; boundary checks on the stack buffer are missing. Reports across OSV, NVD, and Nessus...

CVE-2022-28550

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

CVE-2022-28550

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

CVE-2022-28550

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

OSV-2023-467 Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636 Crash type: Stack-buffer-overflow WRITE 1 Crash state: SetPitchGradient calcpitches CalcPitches...

PT-2023-35863 · Git +1 · Espeak-Ng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 1, and the crash state...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6584117345779712 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7a3142e929...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in SetPitchGradient

Detailed Report: https://oss-fuzz.com/testcase?key=5542902395437056 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x784b7b4ccf94 Crash State: SetPitchGradient...

mupdf:pdf_fuzzer: Stack-buffer-underflow in bmp_read_image

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6423128616861696 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7ffc26b0b002...

CVE-2023-22652 Stack buffer overflow in "read_file" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...

net-snmp:snmp_print_var_fuzzer: Stack-buffer-overflow in sprint_realloc_hinted_integer

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5185505302806528 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpprintvarfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

CVE-2023-32181 Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2...

Fedora 37 : editorconfig (2023-6e5d4757df)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6e5d4757df advisory. Security fix for CVE-2023-0341: update to 0.12.6 close RHBZ2162811 Tenable has extracted the preceding description block directly from the Fedora...

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches lies in the overflow of the stack-based buffer. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

CVE-2022-46658

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution...

OSV-2023-407 Stack-buffer-overflow in DwaCompressor_readChannelRules

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59070 Crash type: Stack-buffer-overflow READ Crash state: DwaCompressorreadChannelRules DwaCompressoruncompress internalexrundodwaa...

PT-2023-35833 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include the DwaCompressor readChannelRules and DwaCompressor uncompress...

The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches is related to the possibility of buffer overflow attacks based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

openexr:openexr_exrcorecheck_fuzzer: Stack-buffer-overflow in DwaCompressor_readChannelRules

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6514127842181120 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Stack-buffer-overfl...