Tenda FH1202 fromWizardHandle Method Buffer Overflow Vulnerability

Tenda FH1202 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a total transmission rate of 1200Mbps. The Tenda FH1202 suffers from a buffer overflow vulnerability that originates from the PPW parameter of the fromWizardHandle method failing to properly validate t...

Tenda A18 Buffer Overflow Vulnerability

Tenda A18 is a dual-band wireless signal extender designed for duplexes, villas and large homes over 120 square meters. The Tenda A18 suffers from a buffer overflow vulnerability that originates from the PPW parameter of the fromWizardHandle method failing to properly validate the length and size...

CVE-2024-32038 Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handling Unicode characters from Windows Eventchannel messages. It impacts Wazuh Manager 3.8.0 and above. This vulnerability is fixed in Wazuh...

PT-2024-4516 · FFmpeg +2 · Ffmpeg +2

Name of the Vulnerable Software and Affected Versions: Ffmpeg versions v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow vulnerability in the config eq output function, located in the libavfilter/asrc afirsrc.c component. This vulnerability allows a local attacker to...

PT-2024-4522 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a Buffer Overflow in the av samples set silence function, located in the libavutil/samplefmt.c component of the Ffmpeg library. This allows a local attacker to potential...

Unspecified Vulnerability in Tenda AC500 (CNVD-2024-23311)

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file. No details of the...

CVE-2024-3874 Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

PT-2024-23832 · Sngrep +2 · Sngrep +2

Name of the Vulnerable Software and Affected Versions: sngrep versions 0.4.2 and later Description: A buffer overflow vulnerability exists due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip get callid and sip get xcallid in sip.c use the strncpy function to copy...

PT-2024-23716 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: The issue allows a remote attacker to execute arbitrary code via the AP4 MemoryByteStream::WritePartial function at Ap4ByteStream.cpp. This is a Buffer Overflow vulnerability. Recommendations: For...

Tenda AC15 addWifiMacFilter Method Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 version 15.03.05.18, which originates from the deviceId/deviceMac parameter in the addWifiMacFilter method of the /goform/addWifiMacFilter page that fails to correctly validate...

FreeImage fill_input_buffer function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that originates from the program failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a...

CVE-2024-28562

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::copyIntoFrameBuffer component when reading images in EXR format...

CVE-2021-47107

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small say, zero, then the buffer size calculation in the new initdirlist helper functions results in an underflow, allowing the XDR stream...

PT-2024-1924

Name of the Vulnerable Software and Affected Versions QEMU versions 7.1.0 through 8.2.1 Description The issue is related to a buffer overflow in the register vfs function in hw/pci/pcie sriov.c of the QEMU hardware emulator. This occurs when a guest writes NumVFs greater than TotalVFs, leading to...

PT-2024-1923 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: QEMU versions 7.1.0 through 8.2.1 Description: The issue is related to a buffer overflow in the dynamic memory of the QEMU hardware emulator, specifically in the register vfs function hw/pci/pcie sriov.c. This function does not set NumVFs to...

CVE-2024-25004

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization at line 2600. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution...

Tenda AC10U fromSetWirelessRepeat function buffer overflow vulnerability

Tenda AC10U is a wireless router from Tenda China. Tenda AC10U fromSetWirelessRepeat function has a buffer overflow vulnerability, the vulnerability stems from fromSetWirelessRepeat function's wpapskcrypto parameter fails to correctly validate the length of the input data size, an attacker can us...

SWFTools swfc.c:2587 Page Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the swftools/src/swfc.c:2587 page that fails to correctly validate the length of the input data, and can be...

SWFTools q.c Page Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the dictforeachkeyvalue method on the swftools/lib/q.c page failing to correctly validate the length and size of the input data, and can ...