CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

The CVE-2021-21722 entry concerns a ZTE ZXV10 B860A Smart Set-Top Box information disclosure vulnerability. According to the sources, the issue arises because the device does not fully verify logs, enabling attackers to obtain sensitive user information for follow-on activity. Affected firmware/v...

stb-linz.de Cross Site Scripting vulnerability OBB-1434377

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__compute_transparency16

Detailed Report: https://oss-fuzz.com/testcase?key=6193806570684416 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbicomputetransparency16 stbiparsepngfile...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__expand_png_palette

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4908103769522176 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State: loadjpegimage stbijpegload stbiloadmain...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5114711032201216 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x602000000091 Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__YCbCr_to_RGB_simd

Detailed Report: https://oss-fuzz.com/testcase?key=5720549589516288 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62a000005fcf Crash State: stbiYCbCrtoRGBsimd loadjpegimage...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_huff_decode

Detailed Report: https://oss-fuzz.com/testcase?key=6243539368542208 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac

Detailed Report: https://oss-fuzz.com/testcase?key=5108509686628352 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbijpegdecodeblockprogac stbiparseentropycodedda...

stb:stbi_read_fuzzer: Index-out-of-bounds in stbi__build_huffman

Detailed Report: https://oss-fuzz.com/testcase?key=4911634777899008 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerubsanstb Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: stbibuildhuffman stbiprocessmarker stbidecodejpegheader...

AitSar (=0.1.1), SadieFish (=0.1.1) +621 more potentially affected by unknown CVE via stb_truetype (>=0.1.2 <=0.3.1)

stbtruetype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.3.0 - airkit =0.1.0 - airsim =0.2.0 - alacritty =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0020...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__paeth

Detailed Report: https://oss-fuzz.com/testcase?key=5762719665094656 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbipaeth stbicreatepngimageraw...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__create_png_image_raw

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5181841310220288 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb assertion failure vulnerability (CNVD-2020-04055)

stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffint in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

stb heap buffer overflow vulnerability (CNVD-2020-04058)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in ttUSHORT in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

stb assertion failure vulnerability

stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffgetindex in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

stb heap buffer overflow vulnerability (CNVD-2020-04061)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttfindtable in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

stb assertion failure vulnerability (CNVD-2020-04060)

stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttbufseek in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

stb heap buffer overflow vulnerability

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufpeek8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...