An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability.
A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
FreeRDP versions prior to 2.11.6 and 3.5.0 contain an integer overflow vulnerability that can lead to out-of-bounds write conditions. This flaw affects FreeRDP clients using the Remote Desktop Protocol and can be triggered when using the /gfx options. The issue is patched in versions 2.11.6 and 3.5.0. As a temporary workaround, users can disable the /gfx options, for example by using /bpp:32 or /rfx.
CVE-2024-21825 is a heap-based buffer overflow vulnerability in the GGUF parsing functionality of llama.cpp. It arises from an integer overflow or wraparound issue in handling GGUF_TYPE_ARRAY and GGUF_TYPE_STRING data. A maliciously crafted .gguf file can trigger this flaw, potentially allowing code execution when processed by vulnerable versions of llama.cpp.
CVE-2024-23496 is a heap-based buffer overflow vulnerability in the GGUF library's gguf_fread_str function within llama.cpp. This flaw arises from an integer overflow or wraparound condition. An attacker can exploit this by supplying a specially crafted .gguf file, potentially leading to arbitrary code execution. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2024-21836 is a high-severity heap-based buffer overflow vulnerability in the GGUF library header.n_tensors functionality of llama.cpp. It arises from an integer overflow or wraparound issue (CWE-190) triggered by processing a specially crafted .gguf file. Successful exploitation could lead to code execution when a malicious file is provided to the vulnerable software.
CVE-2024-23605 is a heap-based buffer overflow vulnerability in the GGUF library header.n_kv functionality of llama.cpp. It arises from an integer overflow or wraparound issue. A specially crafted .gguf file can trigger this flaw, potentially allowing code execution when processed by vulnerable versions of llama.cpp.
An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade.there are no know workarounds for this vulnerability.
An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `vindex_offset` array.
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `rows` array.
An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.
CVE-2023-33107 is a high-severity integer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, IoT, automotive, and wearable devices. The flaw occurs in the Graphics Linux driver during IOCTL calls when assigning shared virtual memory regions, leading to memory corruption. Exploitation requires local access and no user interaction or privileges, potentially allowing attackers to execute arbitrary code or cause denial of service. Although no known exploits are reported, the broad product impact and high CVSS score indicate significant risk. European organizations using devices with affected Snapdragon chipsets, especially in telecommunications, automotive, and IoT sectors, face confidentiality, integrity, and availability threats. Mitigation involves applying vendor patches once available, restricting local access, and monitoring for anomalous behavior. Countries with high smartphone penetration and automotive industries, such as Germany, France, and the UK, are most likely impacted. The vulnerability's ease of exploitation without privileges and its broad scope warrant a high severity rating. Defenders should prioritize patch management and device security controls to mitigate potential exploitation.
CVE-2023-4295 is a high-severity local privilege vulnerability in the Arm Ltd Valhall GPU Kernel Driver (version r29p0). It involves an integer overflow or wraparound (CWE-190) leading to improper GPU memory operations that allow a non-privileged local user to access freed memory (use-after-free, CWE-416). This can result in full compromise of confidentiality, integrity, and availability of the system without requiring user interaction. No known exploits are currently reported in the wild. The vulnerability affects systems using the Valhall GPU architecture, commonly found in various embedded and mobile devices. European organizations using affected hardware or software stacks may face risks of local privilege escalation and data exposure. Mitigation requires applying vendor patches once available and restricting local access to trusted users. Countries with significant mobile and embedded device manufacturing or usage, such as Germany, France, and the UK, are more likely to be impacted.
Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the realloc function.
Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the malloc function.
