66 matches found
OSV-2026-1196 Heap-buffer-overflow in yylex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457 Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer...
PT-2026-85365
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457 Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer...
hobbes:fuzz-parse-expr: Heap-buffer-overflow in yylex
Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=5314345710714880 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-expr Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...
EUVD-2020-16658
Malware in sbrugna...
EUVD-2019-9324
Malware in sbrugna...
EUVD-2025-24013
Malicious code in bioql PyPI...
EUVD-2025-24014
Malicious code in bioql PyPI...
flex:fuzz-main: Global-buffer-overflow in flexscan
Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=4559564168298496 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5b8fa7d25cc0 Cra...
Linux Distros Unpatched Vulnerability : CVE-2019-19720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file. CVE-2019-19720 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-8735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the componen...
SUSE CVE-2025-8735
A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...
SUSE CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...
CVE-2025-8736
A flaw was found in cflow. The yylex function in c.c exhibits a buffer overflow vulnerability, triggered by manipulation of input data. A local attacker could exploit this issue to cause an application level denial of service. This vulnerability stems from insufficient bounds checking during...
CVE-2025-8735
A flaw was found in cflow. The yylex function in c.c exhibits a null pointer dereference due to manipulation, allowing a local attacker to trigger a denial of service via crafted input. This condition arises from improper handling of lexical analysis data. The resulting null pointer dereference c...
CVE-2025-8735
A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...
CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...
DEBIAN-CVE-2025-8735
A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...
CVE-2025-8735
A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...
DEBIAN-CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...
CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...