CVE-2021-41456

The vulnerability CVE-2021-41456 affects GPAC’s MP4Box (v1.0.1). The issue is a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1004 triggered by the szXmlTo parameter, leading to a denial of service. Connected references corroborate the GPAC context and CVE listing; Debi...

CVE-2021-41456

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1004 in the nhmldmxsendsample function szXmlTo parameter which leads to a denial of service vulnerability...

CVE-2021-41459

GPAC MP4Box (v1.0.1) contains a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1008 (szXmlFrom) leading to DoS. The issue is documented as CVE-2021-41459. Debian/DSA-5411 notes the fixed version for bullseye is gpac 1.0.1+dfsg1-4+deb11u2, indicating a package upgrade as ...

CVE-2021-41459: Out-of-bounds Write

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41456: Out-of-bounds Write

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1004 in the nhmldmxsendsample function szXmlTo parameter which leads to a denial of service vulnerability...

CVE-2021-41457: Out-of-bounds Write

There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmxnhml.c in nhmldmxinitparsing which leads to a denial of service vulnerability...

CVE-2021-41459

Removed by vendor...

CVE-2021-41456

Removed by vendor...

CVE-2021-41457

Removed by vendor...

frr:zebra: Stack-buffer-overflow in stream_get2

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=5267954627903488 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffc28598fe0 Crash...

libpsl:libpsl_load_fuzzer: Stack-buffer-overflow in psl_idna_toASCII

Project: https://github.com/rockdaboot/libpsl.git Detailed Report: https://oss-fuzz.com/testcase?key=6483346205573120 Project: libpsl Fuzzing Engine: libFuzzer Fuzz Target: libpslloadfuzzer Job Type: libfuzzerasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreSSL Stack Buffer Overflow Vulnerability

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

OSV-2021-1368 Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196 Crash type: Stack-buffer-overflow READ Crash state: dispatchprinterror internalexrparseheader exrstartread...

PT-2021-27812

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: dispatch print error, internal exr parse header, a...

libpsl:libpsl_load_fuzzer: Stack-buffer-overflow in domain_to_punycode

Project: https://github.com/rockdaboot/libpsl.git Detailed Report: https://oss-fuzz.com/testcase?key=6483136742031360 Project: libpsl Fuzzing Engine: afl Fuzz Target: libpslloadfuzzer Job Type: aflasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fddc41669a...

openexr:openexr_exrcheck_fuzzer: Stack-buffer-overflow in dispatch_print_error

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4953232749756416 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Stack-buffer-overflow...

gdal:ogr_fuzzer: Stack-buffer-overflow in ncindexlookup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6381498756890624 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f2033ed7d81 Crash...

Microsoft Windows cmd.exe - Stack Buffer Overflow Vulnerability

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line interpreter for t...

Microsoft Windows cmd.exe - Stack Buffer Overflow

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Date: 15/09/2021 Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line...