CVE-2011-10005 EasyFTP MKD Command buffer overflow

A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

GTKWave buffer overflow vulnerability (CNVD-2024-04853)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

Linux kernel buffer overflow vulnerability (CNVD-2023-10110752)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that originates from a boundary error in readsize in perfevent in the Performance Events system component when handlin...

PT-2023-9301 · Espeak-Ng +6 · Espeak-Ng +6

Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a buffer overflow in the SetUpPhonemeTable function, which can lead to a denial of service or potentially allow an attacker to execute arbitrary code. The vulnerability is...

PT-2023-9304 · Espeak-Ng +6 · Espeak-Ng +6

Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a buffer overflow in the ReadClause function of the Espeak speech synthesizer, which occurs due to the lack of size checking for input data. This can potentially allow an attacke...

Heap overflow

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...

PT-2023-9218 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow vulnerability in the set encoder id function, located in the /fftools/ffmpeg enc.c component. This vulnerability can be exploited by an attacker to...

Tenda AC10 sub_49E098 function buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from the list parameter of the sub49E098 function failing to correctly validate the length of the input data, and can be...

Tenda AC10 sub_47D878 function buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the sub47D878 function's src parameter failing to correctly validate the length of the input data, which can be exploited by a remote attacker to...

Denial Of Service (DoS)

vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

PT-2023-9358 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the av malloc function, located in the libavutil/mem.c component of the Ffmpeg library. This buffer overflow is caused by copying without checking t...

PT-2023-28869 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the Update WMI module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment,...

PT-2023-6580 · Apache Friends · Xampp

Name of the Vulnerable Software and Affected Versions: XAMPP affected versions not specified Description: The issue is caused by a buffer overflow, allowing a remote attacker to potentially cause a denial of service. Recommendations: At the moment, there is no information about a newer version th...

ROS-20231016-07

A vulnerability in the tiff.c file of the ImageMagick console graphics editor is related to a buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker acting remotely to force a user to open a specially crafted file, resulting in application crash and denial of servi...

CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

PT-2023-27660 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.19 Description: The issue is related to a Buffer Overflow, where the Index parameter does not verify the length. This can lead to potential exploitation. No information is provided about the estimated number of...

PT-2023-27373 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS affected versions not specified Description: An attacker with standard privileges on macOS can submit input when requesting administrator privileges from the application, causing a buffer overflow. This results in a crash of the...

[SECURITY] [DLA 3581-1] flac security update

Debian LTS Advisory DLA-3581-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton September 25, 2023 https://wiki.debian.org/LTS Package : flac Version : 1.3.2-3+deb10u3 CVE ID : CVE-2020-22219 A buffer overflow vulnerability was found in FLAC, a free lossless audio...

SUSE-SU-2023:3727-1 Security update for libqb

This update for libqb fixes the following issues: - CVE-2023-39976: Fixed potential buffer overflow with long log messages bsc1214066...

SUSE-SU-2023:3635-1 Security update for flac

This update for flac fixes the following issues: - CVE-2020-22219: Fixed a buffer overflow in function bitwritergrow which might allow a remote attacker to run arbitrary code via crafted input to the encoder. bsc1214615...