PT-2021-3465

Name of the Vulnerable Software and Affected Versions Realtek RTL8710 and other Ameba-based devices affected versions not specified Description A stack buffer overflow in the memcpy function can lead to remote code execution when an attacker in Wi-Fi range sends a crafted Encrypted GTK value as...

Backdoor.Win32.Delf.acz Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/065d89c63fa1057de98c727d4b044b98.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.acz Vulnerability: Remote Stack Buffer Overflow SEH Description: The malware...

PT-2021-3466

Name of the Vulnerable Software and Affected Versions Realtek RTL8710 and other Ameba-based devices affected versions not specified Description A stack buffer overflow in the AES UnWRAP function can lead to remote code execution when an attacker in Wi-Fi range sends a crafted Encrypted GTK value ...

Unspecified Vulnerability in ZeroMQ

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ server versions prior to 4.3.3, which stems from a vulnerability that allows a malicious client to cause a stack buffer overflow on the server by sending a carefully crafted topic...

CVE-2020-24870: Out-of-bounds Write

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp...

PT-2021-28291

Name of the Vulnerable Software and Affected Versions: jsoncons affected versions not specified Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the decimal128 to chars function and the basic bson parser function. The crash type is...

CVE-2021-29665

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges...

Stack overflow

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges...

DjVuLibre Code Execution

The vulnerability of the function DJVU::DjVuDocument::getdjvufile in the DjVuLibre library and utilities is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Stack Buffer Overflow Vulnerability in Several Tenda AC Routers

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. A number of Tengda AC routers have stack buffer overflow vulnerability, which can be exploited by attackers to cause denial-of-servic...

jsoncons:fuzz_bson_parser_max: Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5718811251703808 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzbsonparsermax Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 6 Crash...

CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

OSV-2021-807 Stack-buffer-overflow in DecodeSingleResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34713 Crash type: Stack-buffer-overflow WRITE Crash state: DecodeSingleResponse DecodeResponseData DecodeBasicOcspResponse...

PT-2021-28283

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. The crash occurs in the following functions: DecodeSingleResponse, DecodeResponseData, and...

CVE-2021-20236: Buffer Copy without Checking Size of Input

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...