61 matches found
CVE-2022-32504
An issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON objects received from the WebSocket service provided by the device leads to a stack buffer overflow. An attacker would be able to exploit this to gain arbitrary code execution on a KeyTurner device. Th...
CVE-2024-34200
TOTOLINK CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function...
CVE-2024-34215
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function...
CVE-2024-29162
HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HGread, resulting in denial of service or potential code execution...
CVE-2024-29158
HDF5 through 1.14.3 contains a stack buffer overflow in H5FLarrmalloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...
Tenda W15E Stack Buffer Overflow Vulnerability
Tenda W15E is a 1200M11AC dual-band enterprise-grade wireless router with strong signal and rich features designed for small businesses and large families with multiple users connecting to the Internet. A stack buffer overflow vulnerability exists in the Tenda W15E in version 15.11.0.14. The...
PT-2024-23843
Name of the Vulnerable Software and Affected Versions sngrep versions 1.4.1 and later Description A stack-buffer overflow issue exists due to inadequate bounds checking when copying Content-Length and Warning headers into fixed-size buffers in the sip validate packet and sip parse extra headers...
PT-2023-9303 · Espeak-Ng +6 · Espeak-Ng +6
Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a Stack Buffer Overflow via the RemoveEnding function at dictionary.c. This can potentially allow an attacker to cause a denial of service or execute arbitrary code. The...
PT-2023-35554 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A stack-buffer-overflow issue was identified, potentially causing a crash. The crash involves the ndpi handle rule and ndpi load protocols file fd...
AdvanceMAME Stack Buffer Overflow Vulnerability
AdvanceMAME is a port of the MAME 0.106 and MESS 0.106 emulators from AdvanceMAME, Inc. For arcade monitors and TVs, also for LCD and PC monitors. AdvanceMAME suffers from a stack buffer overflow vulnerability due to incorrect bounds checking performed by function png\u convert\u 4 in file...
PT-2023-35759 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash, specifically a WRITE 4 operation. The crash occurs in the fn ElIn evaluate function, which is call...
CVE-2023-26923
Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...
CVE-2021-42860
A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...
CVE-2020-20486
IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...
Unspecified Vulnerability in ZeroMQ
ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ server versions prior to 4.3.3, which stems from a vulnerability that allows a malicious client to cause a stack buffer overflow on the server by sending a carefully crafted topic...
MGASA-2017-0372 Updated openvpn packages fix security vulnerability
The bounds check in readkey was performed after using the value, instead of before. If 'key-method 1' is used, this allowed an attacker to send a malformed packet to trigger a stack buffer overflow. Note that 'key-method 1' has been replaced by 'key method 2' as the default in OpenVPN 2.0...
MGASA-2016-0390 Updated gnuchess packages fix security vulnerability
gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to user move input, where 160 characters of input can crash gnuchess CVE-2015-8972...
SUSE-SU-2016:2670-1 Security update for gd
This update for gd fixes the following issues: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...
WebMod 0.48 (Content-Length) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category remote exploits =============================================================== WebMod 0.48 Content-Length Remote Buffer Overflow Exploit PoC =============================================================== / WebMod Stack Buffer Overflow by cybermind Kevin...
HP-UX 11.0 - 'pppd' Local Stack Buffer Overflow
/ Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: HP-UX pppd / / Tested under: HP-UX 11.0 / / By: K2 / / Use: gcc -o pppd...