Astra Linux – Vulnerability in gst-plugins-bad1.0

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors...

The vulnerability of the sub_4151FC() function in the embedded web server of the D-Link DIR-825M router’s software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub4151FC function in the embedded web server of the D-Link DIR-825M router’s software is related to the copying of buffer data without checking the size of the input data during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker ...

CVE-2026-2920 GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

The vulnerability of the `netfs_unbuffered_write_iter_locked()` function in the `fs/netfs/direct_write.c` module, which is part of the Linux kernel’s network file system support, allows a hacker to cause a service failure.

The vulnerability of the netfsunbufferedwriteiterlocked function in the fs/netfs/directwrite.c module, which is part of the Linux kernel’s network file system support, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

CVE-2026-24110

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may send overly long addDhcpRules data. When these rules enter the addDhcpRule function and are processed by ret = sscanfpRule, " %d\t%^\t\t%^\n\r\t", &dhcpsIndex, dhcpsIP, dhcpsMac;, the lack of size validation for the rules could...

PT-2026-22610

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description A buffer overflow issue exists in the Tenda W20E. The issue occurs due to insufficient size validation when processing overly long addDhcpRules data. Specifically, the addDhcpRule function uses...

The vulnerability of the ext2_setsize() function in the fs/ext2/inode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext2setsize function in the fs/ext2/inode.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the qt1010_init() function in the drivers/media/tuners/qt1010.c module of the Linux kernel’s multimedia device driver, which allows a hacker to cause a service failure.

The vulnerability of the qt1010init function in the drivers/media/tuners/qt1010.c driver for multimedia devices in the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Eclipse Paho Go MQTT v3.1 library 安全漏洞

Eclipse Paho Go MQTT v3.1 library is a Go language software library from the Eclipse Foundation. A security vulnerability exists in Eclipse Paho Go MQTT v3.1 library version 1.5.0 and prior versions, which originates from an overflow during unchecked data-length conversion and could lead to the...

CVE-2025-9558 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

Apple macOS USD importMeshJointWeights Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

EUVD-2019-11880

Malware in sbrugna...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2020-11115

u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

Tesla Model S 安全漏洞

The Tesla Model S is an automobile from the American company Tesla. A security vulnerability exists in the Tesla Model S oFono that stems from a failure to validate data length when parsing AT command responses, which could result in a heap buffer overflow...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked smuatomgetdatatable return value that could result in a null pointer dereference...

CVE-2025-26595

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...

Alpine Halo9 安全漏洞

Alpine Halo9 is a multimedia player from Alpine. A security vulnerability exists in Alpine Halo9 that stems from a failure to properly validate the length of user-supplied data before copying it to a stack-based buffer. An attacker exploiting this vulnerability could execute code in a rooted...

node-twain security vulnerability

node-twain is a nodejs client SDK for TWAIN nodejs by lossa individual developer. can control scanners that implement the TWAIN protocol. A security vulnerability exists in node-twain that stems from not checking the length of the source data and is susceptible to improper checking or exception...

The vulnerability of the areverse_request_frame component (libavfilter/f_reverse.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the areverserequestframe component libavfilter/freverse.c in the FFmpeg multimedia library involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...