Carl Hurd

The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerability exists within the code responsible for parsing comments within the geometric vertices section of an OFF file.

An out-of-bounds write issue exists in the PlyFile `ply cast ascii` functionality. A specially crafted .ply file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this issue.

The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerable code is responsible for parsing comments within the geometric faces section of an OFF file.

The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerabilities exist within the code responsible for parsing the header of an OFF file.

The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerabilities exist within the code responsible for parsing geometric faces of an OFF file.

The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerabilities exist within the code responsible for parsing geometric vertices of an OFF file.

An information disclosure issue exists in the User authentication functionality. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this issue.

The issue is related to an integer conversion vulnerability in the SORBAx64.dll library, specifically in the RecvPacket functionality. This vulnerability can be exploited by sending a specially crafted network packet, potentially leading to a buffer overflow. An attacker could use this vulnerability to impact the confidentiality, integrity, and availability of protected information.

A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability. This issue affects the network check binary.

A stack-based buffer overflow issue exists in the `ucloud add node new` functionality. This can be triggered by a specially-crafted network packet, leading to a stack-based buffer overflow. An attacker can exploit this by sending a malicious packet.

A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability. This issue affects the gpio ctrl binary.

A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability. This issue affects the fota binary.

A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability. This issue affects the mesh status check binary.

A buffer overflow vulnerability exists in the `GetValue` functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability. This issue represents all occurrences of the buffer overflow vulnerability within the multiWAN binary.

A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability, which represents all occurrences of the buffer overflow vulnerability within the online process binary.

A hard-coded password vulnerability exists in the libcommonprod.so `prod change root passwd` functionality. This functionality is called during system startup, resulting in a known root password. An attacker does not need to take any action to trigger this issue.

A stack-based buffer overflow issue exists in the confsrv confctl set app language functionality. This can be triggered by a specially-crafted network packet, leading to a stack-based buffer overflow. An attacker can exploit this by sending a malicious packet.

A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, leading to a buffer overflow. An attacker can modify a configuration value to exploit this issue. The vulnerability is related to the confsrv binary.

A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, leading to a buffer overflow. An attacker can exploit this by modifying a configuration value.

A stack-based buffer overflow issue exists in the confsrv set mf rule functionality. This can be triggered by a specially-crafted network packet, leading to a stack-based buffer overflow. The vulnerability exploits the `ethAddr` field within the protobuf message to cause the buffer overflow. An attacker can send a malicious packet to trigger this issue.