CVE-2014-2241

freetype: OOB stack-based read/write in cf2_hintmap_build()

The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed

Vendors

Canonical Freetype

Products

Ubuntu Linux Freetype

CVE-2014-2240

freetype: OOB stack-based read/write in cf2_hintmap_build()

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

CVSS 2.0 · 7.5 High EPSS 7.0% KEV · Not listed

Vendors

Freetype

Products

Freetype

CVE-2025-1164

code-projects Police FIR Record Management System Add Record stack-based overflow

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Code-projects

Products

Police Fir Record Management System

CVE-2012-5959

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 75.8% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2011-3922

qt: Stack-based buffer overflow in embedded harfbuzz code

Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Enterprise Linux

CVE-2011-1938

php: stack-based buffer overflow in socket_connect()

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

CVSS 2.0 · 7.5 High EPSS 23.1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux

CVE-2012-5960

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 32.6% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5961

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Libupnp Project

Products

Libupnp

CVE-2012-5962

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5963

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2010-4542

Gimp: Stack-based buffer overflow in Gfig plug-in

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed

Vendors

Gimp Redhat

Products

Gimp Enterprise Linux

CVE-2012-5964

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2010-4541

Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.

CVSS 2.0 · 9.3 Critical EPSS 6.8% KEV · Not listed

Vendors

Gimp Redhat

Products

Gimp Enterprise Linux

CVE-2010-4540

Gimp: Stack-based buffer overflow in Lighting plug-in

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.8 Medium EPSS 6.1% KEV · Not listed

Vendors

Gimp Redhat

Products

Gimp Enterprise Linux

CVE-2010-4531

pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Muscle Redhat

Products

Pcsc-lite Enterprise Linux

CVE-2010-2948

(bgpd): Stack buffer overflow by processing certain Route-Refresh messages

Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.

CVSS 2.0 · 6.5 Medium EPSS 4.0% KEV · Not listed

Vendors

Quagga Redhat

Products

Quagga Enterprise Linux

CVE-2012-5965

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2013-0249

curl: Stack-based buffer overflow when negotiating SASL DIGEST-MD5 authentication with IMAP, POP3 and SMTP protocols

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.

CVSS 2.0 · 7.5 High EPSS 21.6% KEV · Not listed

Vendors

Canonical Haxx

Products

Ubuntu Linux Curl Libcurl

CVE-2013-0272

pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux Rhel Productivity

CVE-2013-0288

nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed

Vendors

Arthurdejong Redhat

Products

Nss-pam-ldapd Enterprise Linux