AlmaLinux 8 : glibc (ALSA-2025:3828)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:3828 advisory. glibc: buffer overflow in the GNU C Library's assert CVE-2025-0395 Tenable has extracted the preceding description block directly from the AlmaLinux security...

PT-2025-16280 · Unknown · Meshtastic

Name of the Vulnerable Software and Affected Versions: Meshtastic versions prior to 2.6.2 Description: Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an...

CVE-2025-32464

CVE-2025-32464 affects HAProxy 2.2–3.1.6 in some configurations, causing a heap-based buffer overflow in the sample_conv_regsub routine due to mishandling the replacement of multiple short patterns with a longer one. The issue is documented across multiple sources (Debian LTS advisory fixes in 2....

CVE-2025-32464

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one...

D-Link DI-8100 ipsec_road_asp function buffer overflow vulnerability

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which originates from the hostip parameter in the ipsecroadasp function failing to proper...

PyTorch torch.jit.script function buffer overflow vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a buffer error vulnerability that stems from the failure of the function torch.jit.script to properly validate the length size of input data, which can be exploited by an attacker to execute arbitrary code on the system or...

CVE-2025-27199

Animate versions 24.0.7, 23.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-16584 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the PASV Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be initiated remotely, and the exploit has been disclosed t...

CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack...

PT-2025-22954 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software experiences a global-buffer-overflow read issue during archive processing. The crash state indicates the issue occurs within the QByteArray::QByteArray, KZip::openArchive, and...

CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack...

Tenda W6-S setcfm function buffer overflow vulnerability

Tenda W6-S is a 300Mbps wireless panel AP designed for large households such as homes, hotels and villas to provide stable wireless network coverage and low latency network experience. The Tenda W6-S suffers from a buffer overflow vulnerability that originates from the setcfm function failing to...

Tenda W6_S Buffer Overflow Vulnerability (CNVD-2025-08906)

Tenda W6S is a wireless router. The Tenda W6S suffers from a buffer overflow vulnerability that originates when the setlocaltime function does not validate the length of the time parameter when processing the time parameter passed via a POST request, resulting in a buffer overflow that can be...

EulerOS 2.0 SP13 : proftpd (EulerOS-SA-2025-1322)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service DoS ...

CVE-2025-2914

A flaw was found in HDF5. This vulnerability allows a heap-based buffer overflow via manipulating the sect argument in the H5FSsinfoSrializeSctcb function of src/H5FScache.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2022-49754

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmtmeshadd Smatch Warning: net/bluetooth/mgmtutil.c:375 mgmtmeshadd error: memcpy 'meshtx-param' too small 48 vs 50 Analysis: 'meshtx-param' is array of size 48. This is the destination. u8...

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2025-07607)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub42F69C function in /goform/setMacFilterCfg that fails to correctly validate the length of the input data, which can be exploited by an...

CVE-2025-29100

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list...

Tenda RX3 SetPptpServerCfg Buffer Overflow Vulnerability

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a SetPptpServerCfg buffer overflow vulnerability, which originates from the startIp and endIp parameters in...

Tenda RX3 Cache Overflow Vulnerability (CNVD-2025-08318)

Tenda RX3 is a dual-band WiFi home wireless router from China's Tenda. A buffer overflow vulnerability exists in Tenda RX3. The vulnerability originates from a buffer overflow in the schedStartTime and schedEndTime parameters in /goform/saveParentControlInfo, which can lead to a denial of service...