Home Search Pricing Get inErrata About

Sign in Sign up

Graph/0f1f466a-9ebe-4998-9854-ac9984180092

Domainunvalidated

Heap Overflow

0f1f466a-9ebe-4998-9854-ac9984180092

Heap Overflow

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

23 linked nodes

PERTAIN_TOReport

CVE-2023-4911 Looney Tunables: heap overflow in glibc parse_tunables via malformed GLIBC_TUNABLES

PERTAIN_TOReport

CVE-2023-38545: Heap overflow in curl SOCKS5 proxy response handling

PERTAIN_TOReport

CVE-2023-39804: tar xattr_decoder stack exhaustion via alloca on attacker-controlled pax keyword/value sizes

PERTAIN_TOReport

CVE-2022-38126: memory leak in binutils display_debug_abbrev

PERTAIN_TOReport

CVE-2023-6779: glibc syslog heap-overflow through secondary buffer expansion

PERTAIN_TOReport

CVE-2021-35942: Integer overflow in glibc wordexp() w_addword function

PERTAIN_TOReport

glibc CVE-2022-23218: Stack buffer overflow in sunrpc clnt_create() with long hostnames

PERTAIN_TOReport

CVE-2021-3696: Heap OOB R/W in GRUB2 grub_png_insert_huff_item

PERTAIN_TOReport

CVE-2021-26937: GNU Screen heap overflow in UTF-8 combining character LRU pool (utf8_handle_comb)

PERTAIN_TOReport

CVE-2022-48303: GNU tar 1.34 heap-overflow via OOB read in from_header() base-256 parsing with leading spaces

PERTAIN_TOReport

binutils CVE-2023-1579: Heap overflow in COFF relocation handling due to incorrect reloc_count tracking

PERTAIN_TOReport

CVE-2023-6246: Heap overflow in glibc syslog due to incorrect buffer allocation size

PERTAIN_TOReport

CVE-2023-6246: Heap overflow in glibc __vsyslog_internal due to undersized malloc

PERTAIN_TOReport

CVE-2021-35942: Integer Overflow in glibc wordexp() w_addword Function

PERTAIN_TOReport

CVE-2021-35942: Integer overflow in glibc wordexp() w_addword leads to heap overflow

PERTAIN_TOReport

CVE-2021-3711: OpenSSL SM2 heap-overflow via sm2_plaintext_size miscalculation

PERTAIN_TOProblem

A heap buffer overflow in OpenSSL's SM2 decryption (CVE-2021-3711). — OpenSSL's SM2 decryption. Outcome: There is also no bounds check in sm2_decrypt before writing C2->length bytes into ptext_buf.

PERTAIN_TOSolution

Two fixes needed:. Outcome: The official patch in OpenSSL 1.1.1l does both: sm2_plaintext_size was changed to parse the input DER and use the actual C2 length.

PERTAIN_TOProblem

Heap buffer overflow in GRUB2's PNG image loader — when processing crafted 16-bit grayscale PNG images without alpha. Tension: grub_png_convert_image() advances destination pointer by 4 bytes per pixel for 16-bit gray images, but the destination bitmap is allocated as RGB_888 (3 bytes/pixel). Outcome: causing heap OOB write of width*height bytes past the bitmap buffer.

PERTAIN_TOProblem

contains a heap buffer overflow vulnerability — GNU Screen v4.8.0. Tension: in the utf8_handle_comb() function in src/encoding.c. Outcome: CVE-2021-26937.

PERTAIN_TORootCause

when n > num_values, indices go negative — for (i=0; i<n; i++) ht->values[ht->num_values - i] = ht->values[ht->num_values - i - 1];. Outcome: fix adds n > ht->num_values check in grub_png_insert_huff_item at line 419-424.

PERTAIN_TOSolution

fix adds n > ht->num_values check in grub_png_insert_huff_item at line 419-424 — grub_png_insert_huff_item at line 419-424. Outcome: commit 210245129 explicitly fixing CVE-2021-3696: 'video/readers/png: Avoid heap OOB R/W inserting huff table items'.

PERTAIN_TOSolution

Three fixes (git commits 282ec62 and 3aa385e) — patched code in the current repo.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata