Base de CVEs

CVE-2025-6170 Baixa · 2.5 CWE-121 16/06/2025

Libxml2: stack buffer overflow in xmllint interactive shell command handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

CVE-2025-5278 Média · 4.4 CWE-121 27/05/2025

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

CVE-2025-42599 Crítica · 9.8 KEV Alta · 61 CWE-121 18/04/2025

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

CVE-2023-24566 Baixa · 3.3 CWE-121 14/02/2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19472)

CVE-2023-24549 Alta · 7.8 CWE-121 14/02/2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

CVE-2022-47936 Alta · 7.8 CWE-121 14/02/2023

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

CVE-2022-2304 Alta · 7.8 CWE-121 05/07/2022

Stack-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

CVE-2022-2078 Média · 5.5 CWE-121 30/06/2022

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw...

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

CVE-2021-20038 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-121 08/12/2021

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

CVE-2014-9163 Alta · 7.8 KEV Alta · 56 CWE-121 10/12/2014

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

CVE-2013-2597 Alta · 8.4 KEV Alta · 58 Exploit público CWE-121 31/08/2014

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.