cwe-134
Safeguard articles tagged "cwe-134" — guides, analysis, and best practices for software supply chain and application security.
4 articles
CVE-2020-3118: Cisco IOS XR Software Discovery Protocol Format String Vulnerability
CVE-2020-3118 affects Cisco IOS XR and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-1579: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVE-2019-1579 affects Palo Alto Networks PAN-OS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-10.
CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability
CVE-2024-23113 affects Fortinet Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-09.
Format string vulnerabilities explained
Format string bugs let attackers turn a printf call into memory disclosure or arbitrary writes. Here's how CWE-134 works, real CVEs, and fixes.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.