10726 matches found
libreoffice:hwpfuzzer: Stack-buffer-overflow in hcolor2str
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4518292339949568 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 14 Crash...
CVE-2022-25044
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...
CVE-2022-25044
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...
CVE-2022-25465
Espruino 2v11 release contains a stack buffer overflow in src/jsvar.c (jsvGetNextSibling). Root cause: a buffer overflow within the JS variable handling path. Documents do not specify exploit vectors, versions beyond 2v11, or concrete remediation; no exploitation details are provided. Remediation...
CVE-2022-25465
Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...
CVE-2022-25465: Out-of-bounds Write
Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...
PT-2022-17315
Name of the Vulnerable Software and Affected Versions Espruino version 2v11 Description A stack buffer overflow issue was discovered in Espruino via the src/jsvar.c file, specifically in the jsvGetNextSibling function. Recommendations For Espruino version 2v11, consider restricting access to the...
CVE-2022-25044: Out-of-bounds Write
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...
PT-2022-17060
Name of the Vulnerable Software and Affected Versions Espruino version 2v11.251 Description A stack buffer overflow issue was discovered in Espruino via the jsvNewFromString function in src/jsvar.c. Recommendations For Espruino version 2v11.251, consider restricting the use of the jsvNewFromStrin...
fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Stack-buffer-overflow in msgpack_sbuffer_write
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4894251580784640 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...
Stack overflow
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...
Stack overflow
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...
CVE-2021-46394
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...
CVE-2021-46393
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...
CVE-2021-46393
CVE-2021-46393 is a stack buffer overflow in the Tenda-AX3 router (V16.03.12.10_CN) due to the formSetPPTPServer function. The vulnerability arises because the v10 variable is sourced from the HTTP parameter startIp and is concatenated into the stack via sscanf without bounds checking, causing ov...
CVE-2021-46393: Out-of-bounds Write
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...
PT-2022-12689
Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow vulnerability in the formSetPPTPServer function. The v13 variable is directly retrieved from the HTTP request parameter startIp without any...
PT-2022-12688
Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow in the formSetPPTPServer function. The v10 variable is directly retrieved from the HTTP request parameter startIp without any security checks,...
