OSV-2021-802 Stack-buffer-overflow in InterpretCondition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34692 Crash type: Stack-buffer-overflow READ 1 Crash state: InterpretCondition InterpretPhoneme MakePhonemeList...

PT-2021-28280

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: InterpretCondition, InterpretPhoneme, and...

PoDoFo Stack Buffer Overflow Vulnerability

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. A stack buffer overflow vulnerability exists in the PdfEncrypt::ComputeOwnerKey function in PdfEncrypt.cpp in PoDoFo version 0.9.7. The vulnerability stems from improper checking of the keyLength value. No...

wolfssl:fuzzer-wolfssl-ocsp: Stack-buffer-overflow in DecodeSingleResponse

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5404351943278592 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-wolfssl-ocsp Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in InterpretCondition

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5589246627938304 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

CVE-2020-4839

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

Trend Micro Bugs Threaten Home Network Security

Three security vulnerabilities have been found in Trend Micro’s Home Network Security systems, which can allow denial of service DoS, privilege escalation, code execution and authentication bypass. The Home Network Security Station is an all-in-one device that scans for vulnerabilities for...

embedded web server software Stack Buffer Overflow

The vulnerability of the webSettingProfileGeneral function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or caus...

libconfig.so Stack Buffer Overflow

The vulnerability of the configset function in the libconfig.so library, a built-in software library for web servers, is related to buffer overflows in the stack due to insufficient input handling. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary...

CVE-2020-4839

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037...

Stack-based Buffer Overflow in codeplea/tinyexpr

✍️ Description Whilst experimenting with repl built from commit 61af1d, with Clang 10 +ASan on Ubuntu 20.04.2 LTS, we discovered an expression containing 4 null characters after a newline which, due to insufficient bounds checking, triggers a stack-buffer-overflow. 🕵️‍♂️ Proof of Concept echo...

assimp:assimp_fuzzer: Stack-buffer-overflow in std::__1::list<Assimp::LWO::Envelope, std::__1::allocator<Assimp::LWO::Envelope>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4770312630697984 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2021-1875)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption th...

Siemens Solid Edge Stack Buffer Overflow Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. A stack buffer overflow vulnerability exists in Siemens Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

Backdoor.Win32.Agent.oda Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/380ff48c4a28ac25f5efb630883eeb17.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.oda Vulnerability: Remote Stack Buffer Overflow UDP Description: The malware...

OSV-2021-769 Stack-buffer-overflow in TranslateClause

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34332 Crash type: Stack-buffer-overflow READ 16 Crash state: TranslateClause SpeakNextClause Synthesize...

PT-2021-28260

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: TranslateClause, SpeakNextClause, and Synthesize...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateClause

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6060397091225600 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address...

OSV-2021-764 Stack-buffer-overflow in TranslateNumber_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34285 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber1 TranslateNumber TranslateWord3...

PT-2021-28256

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state includes functions such as TranslateNumber 1, TranslateNumber, and...