PT-2024-22947 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 version 5.8.8 Description: The issue allows an attacker to execute arbitrary code via the parse die function. This is a buffer overflow vulnerability that can be exploited to gain unauthorized access and execute malicious code...

IrfanView out-of-bounds write vulnerability (CNVD-2025-03966)

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. IrfanView suffers from a buffer overflow vulnerability that stems from the SID file parsing function containing a stack-based buffer overflow. An attacker can exploit this vulnerability to...

PT-2024-10174 · Iptraf-Ng +3 · Iptraf-Ng +3

Name of the Vulnerable Software and Affected Versions: iptraf-ng version 1.2.1 Description: The issue is related to a stack-based buffer overflow in the iptraf-ng utility, which can be exploited by a remote attacker to execute arbitrary code. This occurs due to the strcpy function in src/ifaces.c...

Tenda G3 formSetPortMapping Buffer Overflow Vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. The Tenda G3 suffers from a buffer overflow vulnerability that originates from the formSetPortMapping function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the system or cau...

NETGEAR R7000P ru_wan_flow.cgi component buffer overflow vulnerability

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the ruwanflow.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...

NumPy < 1.19 DoS

The version of NumPy installed on the remote host is prior to 1.19. It is, therefore, affected by a Buffer overflow vulnerability in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with...

Google Pixel flexpmu_cal_rae.c file buffer overflow vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from a lack of checking of boundaries in pmucalraehandleseqint in flexpmucalrae.c, which can be exploited by an attacker to cause an out-of-bounds read...

D-Link DI_8200 Buffer Overflow Vulnerability

The D-Link DI8200 is an enterprise router from China's AUO D-Link. The D-Link DI8200 suffers from a buffer overflow vulnerability that stems from the strcpy function not checking the length of a string during execution. No details of the vulnerability are provided at this time...

AUO DIR-605L formLogDnsquery Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the formLogDnsquery function in the /goform/formLogDnsquery page that fails to properly validate the length of the input data,...

AUO DIR-605L formSetDomainFilter Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the parameter curTime in the formSetDomainFilter function of file /goform/formSetDomainFilter that fails to correctly validate the length of the inpu...

Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP responses provided to the ddns-start...

PT-2024-32084 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: The issue is related to a Buffer Overflow that occurs via the MD5Importer::LoadMD5MeshFile function. This function is part of the MD5Importer in Assimp. Recommendations: For Assimp version 5.4.3, as a tempora...

CVE-2024-41436

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl...

CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...

Tenda AX1806 Buffer Overflow Vulnerability (CNVD-2025-12099)

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 suffers from a buffer overflow vulnerability that stems from the adv.iptv.stballvlans parameter in the function formGetIptv containing a stack overflow. No detailed vulnerability details are provided at th...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-11166)

The Tenda FH1201 is a wireless router from Tenda, a Chinese company. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the Go parameter in the fromSafeClientFilter function containing a stack overflow. An attacker could exploit this vulnerability to cause a denial...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-11212)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the page parameter in the fromqossetting function containing a stack overflow. An attacker could exploit this vulnerability to cause a denial of service...

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2024-36298)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe InDesign, which can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

CVE-2024-7584 Tenda i22 apPortalPhoneAuth formApPortalPhoneAuth buffer overflow

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.34687. Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...

(0Day) oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of SMS PDUs. The issue results...