CVE-2024-27280 is a critical buffer-overread vulnerability in the StringIO library versions 3.0.1 as used in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The flaw allows the ungetbyte and ungetc methods to read beyond the end of the string buffer, potentially exposing memory contents when StringIO.gets is called subsequently. Fixed versions include 3.0.3, stringio 3.0.1.1 for Ruby 3.0, and stringio 3.0.1.2 for Ruby 3.1.
CVE-2023-43525 is a medium severity buffer overflow vulnerability in Qualcomm Snapdragon chipsets affecting multiple versions and models. It arises from improper size checking when copying sound model data from user space to kernel space, leading to memory corruption. Exploitation requires local privileged access and no user interaction, potentially allowing attackers with high privileges to compromise confidentiality, integrity, and availability of affected devices. Although no known exploits are reported in the wild, the vulnerability impacts a broad range of Snapdragon-based devices, including mobile phones, automotive systems, and IoT devices. European organizations using devices with these chipsets, especially in critical infrastructure or automotive sectors, could face risks of privilege escalation or system compromise. Mitigation involves applying vendor patches once available and implementing strict input validation and memory protection mechanisms. Countries with high adoption of Snapdragon devices and advanced automotive industries, such as Germany, France, and the UK, are most likely to be affected. Given the medium CVSS score and exploitation complexity, the threat requires attention but is not immediately critical.
CVE-2024-26889 is a medium severity vulnerability in the Linux kernel's Bluetooth hci_core component. It involves a possible buffer overflow due to improper handling of the hci_dev_info name field, which has a fixed size of 8 bytes. The vulnerability is addressed by replacing unsafe strcpy usage with strscpy to prevent writing beyond the buffer size.
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow.
This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The `concat` built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the `build_IR` for `concat` doesn't properly adhere to the API of copy functions (for `>=0.3.2` the `copy_bytes` function). A contract search was performed and no vulnerable contracts were found in production. The buffer overflow can result in the change of semantics of the contract. The overflow is length-dependent and thus it might go unnoticed during contract testing. However, certainly not all usages of concat will result in overwritten valid data as we require it to be in an internal function and close to the return statement where other memory allocations don't occur. This issue has been addressed in 0.4.0.
A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716.
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.2.2534 build 20230927 and later
TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.
CVE-2023-33055 is a high-severity buffer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, wearable, automotive, and IoT devices. The flaw arises from improper size checking during a buffer copy operation in the audio driver callback function within the ADSP (Audio DSP) subsystem, leading to memory corruption. Exploitation requires local privileges and no user interaction but can result in full confidentiality, integrity, and availability compromise. This vulnerability impacts numerous Snapdragon chipsets widely used in smartphones and embedded devices across Europe. Although no known exploits are currently reported in the wild, the potential for privilege escalation or arbitrary code execution is significant. European organizations relying on affected devices should prioritize patching once available and implement strict access controls to mitigate risk. Countries with high smartphone penetration and strong industrial IoT adoption are most at risk. The vulnerability is rated with a CVSS score of 7.8 (high), reflecting its serious impact and moderate exploit complexity.
CVE-2023-33031 is a high-severity buffer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, automotive, and IoT devices. The flaw arises from improper size checking when copying data from the ADSP shared buffer to the VOC packet data buffer in the Automotive Audio component, leading to memory corruption. Exploitation requires local privileges and no user interaction, potentially allowing attackers to execute arbitrary code with elevated privileges, compromising confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the extensive list of affected Snapdragon versions and platforms increases the risk. European organizations using devices or embedded systems with these Qualcomm components, especially in automotive, mobile, and industrial sectors, face significant security risks. Mitigation requires prompt application of vendor patches once available, strict access controls to limit local privilege escalation, and monitoring for anomalous behavior in affected systems. Countries with strong automotive industries and high adoption of Snapdragon-based devices, such as Germany, France, Italy, and the UK, are particularly at risk. Given the complexity and privileged nature of the vulnerability, the severity is assessed as high, demanding immediate attention from defenders.
CVE-2023-33010 is a critical buffer overflow vulnerability in multiple Zyxel firewall and VPN device firmware versions, including ATP, USG FLEX, USG20(W)-VPN, and ZyWALL/USG series. The flaw exists in the ID processing function and allows an unauthenticated attacker to remotely execute code or cause denial-of-service conditions. It affects firmware versions ranging approximately from 4.25 to 5.36 Patch 1, depending on the product line. The vulnerability has a CVSS score of 9.8, indicating high exploitability without authentication or user interaction. Although no known exploits are currently reported in the wild, the potential impact on confidentiality, integrity, and availability is severe. European organizations using Zyxel network security appliances are at risk, especially those in critical infrastructure, government, and enterprises relying on these devices for perimeter defense. Mitigation requires immediate firmware updates once patches are available, network segmentation, and monitoring for anomalous traffic targeting these devices.
CVE-2023-33009 is a critical buffer overflow vulnerability in multiple Zyxel firewall and VPN device firmware versions (4.60 through 5.36 Patch 1). It affects Zyxel ATP, USG FLEX, USG20(W)-VPN, VPN series, and ZyWALL/USG series devices. The flaw exists in the notification function and can be exploited remotely without authentication or user interaction. Successful exploitation can lead to denial-of-service or remote code execution, compromising confidentiality, integrity, and availability. No known exploits are currently reported in the wild, but the high CVSS score (9.8) indicates severe risk. European organizations using these Zyxel devices should prioritize patching and implement network-level protections. Countries with significant Zyxel deployments and critical infrastructure reliance on these devices are at higher risk.
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off) localip A.B.C.D' command template.
