Posts tagged "buffer-overflow"

June 20, 20206 min read

SMBGhost & SMBleed: Analysis of CVE-2020-0796 + CVE-2020-1206

Analysis of an Integer Overflow (SMBGhost) and an uninitialized kernel memory leak (SMBleed) in the SMBv3.1.1 decompression routine, and a Pre-Auth RCE achieved by chaining the two bugs

Read full article

January 21, 20177 min read

CVE-2016-10190: FFmpeg Heap-Based Buffer Overflow

Analysis of a heap-based buffer overflow in FFmpeg's libavformat HLS demuxer — arbitrary code execution via a crafted HLS playlist

Read full article