CVE-2024-1532

Hitachi Energy RTU500 CMU Firmware is affected by CVE-2024-1532 (stb-language file handling). A specially crafted stb-language file uploaded by an authorized user could cause diagnostic texts to be displayed as empty strings. Affected firmware ranges include 12.0.1–12.0.14, 12.2.1–12.2.11, 12.4.1...

CVE-2024-1531

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file...

CVE-2024-1531

CVE-2024-1531 affects Hitachi Energy RTU500 series CMU Firmware due to a flaw in the stb-language file handling. Affected firmware ranges include 12.0.1–12.0.14, 12.2.1–12.2.11, 12.4.1–12.4.11, 12.6.1–12.6.9, 12.7.1–12.7.6, 13.2.1–13.2.6, 13.4.1–13.4.4, and 13.5.1–13.5.3. The vulnerability could ...

CVE-2024-1531

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file...

Hitachi Energy RTU500 安全漏洞

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A security vulnerability exists in Hitachi Energy RTU500 series CMU Firmware, which originates from a problem in stb language file handling, and can be exploited by an attacker to...

Hitachi Energy RTU500 安全漏洞

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A security vulnerability exists in Hitachi Energy RTU500 series CMU Firmware versions 12.0.1 through 12.0.14, which is caused due to a problem in the handling of stb language files,...

PT-2024-18118 · Unknown · Rtu500 Series

Name of the Vulnerable Software and Affected Versions: RTU500 series product affected versions not specified Description: A vulnerability exists in the stb-language file handling. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a...

OESA-2024-1263 stb security update

Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it...

OESA-2024-1262 stb security update

Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn’t give guarantees about the content of output value delays upon failure. Although it sets delays to zero at the beginning, it...

Null Pointer Dereference

stb is vulnerable to Null Pointer Dereference. The vulnerability is due to the improper handling within the stbiconvertformat function, this allowing attackers to trigger a Denial of Service DoS through a specially crafted pic file...

CVE-2023-51970

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2023-51957

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv...

CVE-2023-51957

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv...

Stack overflow

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in the Tenda AX1803 v1.0.0.1, which can be exploited by an attacker to execute arbitrary code on the system by sending a specially crafted HTTP request using the iptv.stb.mode parameter...

CVE-2023-51962

The CVE-2023-51962 entry affects Tenda AX1803 v1.0.0.1 and describes a stack overflow in the setIptvInfo function triggered by the iptv.stb.mode parameter. Affected component: iptv control in AX1803; root cause: stack overflow vulnerability in setIptvInfo. Documented impact aligns with a high sev...

PT-2024-14342 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.mode parameter in the formGetIptv function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

The vulnerability of the stb_image.h component in the C/C++ Libstb library allows a hacker to access confidential data and also trigger a service denial.

The vulnerability of the stbimage.h component in the C/C++ Libstb library is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...

The vulnerability of the stb_image.h component in the C/C++ Libstb library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stbimage.h component in the C/C++ Libstb library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

OESA-2023-1837 stb security update

Single-file public domain libraries for C/C++. Security Fixes: Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbiconvertformat. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted pic file.CVE-2023-43898...