https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:09:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04159 bdu:2023-04159 https://cve.radiocsirt.org/vuln/bdu:2023-04159 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0580 certfr-2023-avi-0580 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0580 https://cve.radiocsirt.org/vuln/euvd-2026-200267 EUVD-2026-200267 https://cve.radiocsirt.org/vuln/euvd-2026-200267 https://cve.radiocsirt.org/vuln/fkie_cve-2023-21406 <p>Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code.</p> <p>lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.</p> <p>Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code.</p> <p>lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-21406 https://cve.radiocsirt.org/vuln/ghsa-m2fp-c5wr-xjph <p>Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code.</p> <p>lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.</p> <p>Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code.</p> <p>lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.</p> https://cve.radiocsirt.org/vuln/ghsa-m2fp-c5wr-xjph https://cve.radiocsirt.org/vuln/gsd-2023-21406 gsd-2023-21406 https://cve.radiocsirt.org/vuln/gsd-2023-21406 https://cve.radiocsirt.org/vuln/icsa-23-206-01 <p>A heap-based buffer overflow vulnerability exists in the AXIS 1001 versions 1.65.4 and prior. When communicating over the Open Supervised Device Protocol (OSDP), the pacsiod process that handles the OSDP communication allows for writing outside of the allocated buffer. By appending invalid data to an OSDP message, it is possible to write data beyond the heap allocated buffer. The data written outside the buffer could allow an attacker to execute arbitrary code.</p> <p>A heap-based buffer overflow vulnerability exists in the AXIS 1001 versions 1.65.4 and prior. When communicating over the Open Supervised Device Protocol (OSDP), the pacsiod process that handles the OSDP communication allows for writing outside of the allocated buffer. By appending invalid data to an OSDP message, it is possible to write data beyond the heap allocated buffer. The data written outside the buffer could allow an attacker to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/icsa-23-206-01