CVE-2024-57184

An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...

CVE-2024-57537

Affected product: Linksys E8450 router (firmware v1.2.00.360516). Vulnerability: a buffer overflow where the page field is copied to the stack without length verification. Root cause: unchecked copying of the page parameter leads to stack overflow. Impact: described in PT-2025-3465 as possible re...

CVE-2024-57703

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTime leads to stack-based buffer overflow...

CVE-2024-57704

The CVE-2024-57704 entry concerns Tenda AC8v4 firmware V16.03.34.06. A stack-based buffer overflow affects the function setSchedWifi in /goform/openSchedWifi, caused by improper handling of the schedStartTime argument. Impact is described as high for confidentiality, integrity, and availability p...

Wavlink AC3000 adm.cgi rep_as_bridge() buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2025 Wavlink AC3000 adm.cgi repasbridge buffer overflow vulnerability January 14, 2025 CVE Number CVE-2024-37184 SUMMARY A buffer overflow vulnerability exists in the adm.cgi repasbridge functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted...

Wavlink AC3000 usbip.cgi set_info() buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2045 Wavlink AC3000 usbip.cgi setinfo buffer overflow vulnerability January 14, 2025 CVE Number CVE-2024-36272 SUMMARY A buffer overflow vulnerability exists in the usbip.cgi setinfo functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP...

CVE-2024-57483

Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function...

CVE-2024-12803

The connected SonicWall advisory confirms CVE-2024-12803 in SonicOS: a post-authentication stack-based buffer overflow in the SonicOS management interface can be exploited remotely over the network to crash the firewall and potentially achieve code execution. Affected: SonicOS management componen...

PT-2025-7466

Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A heap-based buffer overflow issue exists in the grub udf read block function, potentially allowing for arbitrary code execution. Recommendations At the moment, there is no information about a...

CVE-2024-12751

CVE-2024-12751 affects Foxit PDF Reader, involving an AcroForm out-of-bounds read that can lead to remote code execution. The flaw stems from improper validation of user-supplied data in AcroForms, causing a read past the end of an allocated buffer. An attacker can trigger code execution in the c...

Amazon Linux 2 : vim (ALAS-2024-2711)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2711 advisory. Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in t...

CVE-2020-12820

Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remote attacker authenticated to the SSL VPN to crash the FortiClient NAC daemon fcnacd and potentially execute arbitrary code via requesting a large FortiClien...

PT-2025-8819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue has been identified in the Linux kernel, specifically in the nfs sysfs link rpc client function. The issue arises from the use of strcat with a char arr...

CVE-2024-31670

CVE-2024-31670 affects rizin before v0.6.3. The buffer overflow vulnerability is triggered via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf in librz/bin/format/mach0/dyldcache.c, with impact described as low for confidentiality, integrity, and availability per CVSS 3.1 vector. Pu...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-47615

GStreamer has a concrete vulnerability CVE-2024-47615: an OOB write in vorbis_parse.c within gst_parse_vorbis_setup_packet where a size read from input is not validated, allowing the write to exceed pad->vorbis_mode_sizes (256) by as much as ~380 bytes and potentially corrupt adjacent memory. ...

CVE-2024-53956

Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the user context. Exploitation requires user interaction (victim must open a malicious file). Multiple sources confirm the issue as CVE-2024-53956 and tie it to...

CVE-2024-12343 TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow

A vulnerability classified as critical has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be...

PT-2024-35142 · Tenda · Tenda Ac6V2

Name of the Vulnerable Software and Affected Versions: Tenda AC6V2 versions through 15.03.06.50 Description: The issue is a stack-based buffer overflow vulnerability in the fromAdvSetLanip module, specifically with the lanMask argument, allowing buffer overflows. This problem affects Tenda AC6V2...