1081 matches found
FreeRDP progressive_decompress function buffer overflow vulnerability
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the miscalculation of the nXSrc and nYSrc variables in the progressivedecompress function. An attacker could exploit this...
FreeRDP general_LumaToYUV444 function buffer overflow vulnerability
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the generalLumaToYUV444 function processing on the in variable without checking if it contains data of sufficient length. An...
Buffer overflow
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "sub73004."...
PT-2023-27737 · O Ran Software Community · Ric-Plt-Lib-Rmr
Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-lib-rmr version 4.9.0 Description: The issue allows a remote attacker to cause a denial of service via the packet size component. This is a Buffer Overflow vulnerability. Recommendations: For version 4.9.0,...
PT-2023-25614 · Zoom · Zoom Client
Name of the Vulnerable Software and Affected Versions: Zoom Clients versions prior to 5.14.5 Description: The issue is related to a buffer overflow that may allow an unauthenticated user to cause a denial of service via network access. Recommendations: For versions prior to 5.14.5, update to...
QEMU Buffer Overflow Vulnerability (CNVD-2024-14774)
QEMU is a suite of simulation processor software. The software is fast and cross-platform. Qemu suffers from a buffer overflow vulnerability that stems from the fact that the values of srclen and dstlen are not checked in virtiocryptosymophelper, and a heap buffer overflow may occur when processi...
CVE-2020-23910
Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhashget in genhash.c...
PT-2023-5827 · D Link · D-Link Dir-3040
Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. The specific flaw exists within the prog.cgi binary, whi...
CVE-2023-25433
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...
Heap Based Buffer Overflow
libtiff.so is vulnerable to Heap Based Buffer Overflow. The vulnerability exists in extractContigSamplesBytes of tiffcrop.c which allows a remote attacker to cause buffer overflows via a crafted input...
CVE-2023-25435
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits at /libtiff/tools/tiffcrop.c:3753...
CVE-2020-20703
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter...
CVE-2023-32276
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...
CVE-2022-48330
A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. Affected product versions include:FLMG-10 versions FLMG-10 10.0.1.0H100SP22C00...
PT-2023-4905 · Libtiff +2 · Libtiff +2
Name of the Vulnerable Software and Affected Versions: libtiff version 4.5.0 Description: The issue is caused by a buffer overflow on the stack in the extractcontigsamplesbytes function of the libtiff library. This can be exploited by a remote attacker to impact the confidentiality, integrity, an...
CVE-2023-0666 Wireshark RTPS Parsing Buffer Overflow
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...
Denial Of Services (DoS)
qt6-qtbase is vulnerable to Denial Of Services DoS. The vulnerability exists When an SVG file with an image inside it is rendered, which allows an attacker to cause an application crash through the buffer overflow in QTextLayout...
PoDoFo Buffer Overflow Vulnerability (CNVD-2023-39431)
PoDoFo is a free portable C++ library open-sourced by PoDoFo. PoDoFo version 0.10.0 suffers from a buffer overflow vulnerability that originates from the function PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3 contains a heap buffer overflow. A remote attacker could exploit this vulnerability to execut...
