CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 14)
Page 14 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-26008 | Critical | 9.8 | 2025-03-26 | In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost. |
CVE-2025-26007 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi. |
CVE-2025-26006 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest. |
CVE-2025-26005 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp. |
CVE-2025-26004 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns. |
CVE-2025-26002 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost. |
CVE-2025-27836 | Critical | 9.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c. |
CVE-2025-27835 | High | 7.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. |
CVE-2025-27834 | High | 7.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c. |
CVE-2025-27833 | High | 7.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c. |
CVE-2025-27832 | Critical | 9.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c. |
CVE-2025-27831 | Critical | 9.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/d… |
CVE-2025-27830 | High | 7.8 | 2025-03-25 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and… |
CVE-2025-29137 | Critical | 9.8 | 2025-03-19 | Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the form_fast_setting_wifi_set function, which can cause RCE. |
CVE-2024-44866 | Medium | 6.8 | 2025-03-17 | A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary code or cause a Denial of Service (DoS)… |
CVE-2025-29032 | Medium | 5.9 | 2025-03-14 | Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function. |
CVE-2025-1430 | High | 7.8 | 2025-03-13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulne… |
CVE-2025-29363 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at /goform/saveParentContro… |
CVE-2025-29362 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList. This vulnerability allows a… |
CVE-2025-29361 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg. This vulnerability allo… |
CVE-2025-29360 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerabil… |
CVE-2025-29359 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerabilit… |
CVE-2025-29358 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability all… |
CVE-2025-25567 | Critical | 9.8 | 2025-03-12 | SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. NOTE: the Supplier disputes this because the be… |
CVE-2025-25565 | Critical | 9.8 | 2025-03-12 | SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. NOTE: the Supplier disputes thi… |
CVE-2025-20115 | High | 8.6 | 2025-03-12 | A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote atta… |
CVE-2025-2017 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt CO File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-53695 | Critical | 9.1 | 2025-03-07 | A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify me… |
CVE-2025-23234 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. |
CVE-2025-22897 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. |
CVE-2025-1899 | Medium | 6.5 | 2025-03-04 | A vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-1898 | Medium | 6.5 | 2025-03-04 | A vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown function of the file /goform/openSchedWifi… |
CVE-2025-1897 | Medium | 6.5 | 2025-03-04 | A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects some unknown processing of the file /gofor… |
CVE-2025-1896 | Medium | 6.5 | 2025-03-04 | A vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg… |
CVE-2025-1895 | Medium | 6.5 | 2025-03-04 | A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The man… |
CVE-2025-0689 | High | 7.8 | 2025-03-03 | When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In certain sc… |
CVE-2024-53027 | High | 7.5 | 2025-03-03 | Transient DOS may occur while processing the country IE. |
CVE-2024-43055 | High | 7.8 | 2025-03-03 | Memory corruption while processing camera use case IOCTL call. |
CVE-2025-25280 | Medium | 5.3 | 2025-03-03 | Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., L… |
CVE-2025-1864 | Critical | 9.8 | 2025-03-03 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2… |
CVE-2025-1852 | High | 8.8 | 2025-03-03 | A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the… |
CVE-2025-1786 | Medium | 5.3 | 2025-03-01 | A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in the librar… |
CVE-2025-25723 | High | 8.4 | 2025-02-28 | Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code. |
CVE-2025-25635 | High | 8.0 | 2025-02-28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 p… |
CVE-2025-25610 | High | 8.0 | 2025-02-28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw pa… |
CVE-2025-25609 | High | 8.0 | 2025-02-28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6… |
CVE-2024-51139 | Critical | 9.8 | 2025-02-27 | Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133… |
CVE-2025-21780 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user prov… |
CVE-2022-49058 | Critical | 9.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/… |
CVE-2025-1587 | Medium | 5.3 | 2025-02-23 | A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of… |
CVE-2025-25510 | Medium | 6.5 | 2025-02-21 | Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function. |
CVE-2025-25505 | Medium | 6.5 | 2025-02-21 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function. |
CVE-2025-25678 | Critical | 9.8 | 2025-02-20 | Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function. |
CVE-2025-25676 | Critical | 9.8 | 2025-02-20 | Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function. |
CVE-2025-25674 | Critical | 9.8 | 2025-02-20 | Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid. |
CVE-2025-25668 | Critical | 9.8 | 2025-02-20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function. |
CVE-2025-25667 | Critical | 9.8 | 2025-02-20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info. |
CVE-2025-25664 | Critical | 9.8 | 2025-02-20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function. |
CVE-2025-25663 | Critical | 9.8 | 2025-02-20 | A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument… |
CVE-2025-25662 | Critical | 9.8 | 2025-02-20 | Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/ty… |
CVE-2023-46271 | Critical | 9.8 | 2025-02-19 | Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens… |
CVE-2025-25474 | Medium | 6.5 | 2025-02-18 | DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h. |
CVE-2025-25472 | Medium | 5.3 | 2025-02-18 | A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file. |
CVE-2025-1372 | Medium | 5.3 | 2025-02-17 | A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_strin… |
CVE-2025-1368 | Low | 2.3 | 2025-02-17 | A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfig… |
CVE-2025-1367 | Medium | 5.3 | 2025-02-17 | A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component… |
CVE-2025-1365 | Medium | 5.3 | 2025-02-17 | A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the compo… |
CVE-2025-25900 | Medium | 4.9 | 2025-02-13 | A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This vulnerabi… |
CVE-2025-25343 | Critical | 9.8 | 2025-02-12 | Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function. |
CVE-2024-0144 | Medium | 6.8 | 2025-02-12 | NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A success… |
CVE-2025-25530 | Critical | 9.8 | 2025-02-11 | Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control… |
CVE-2025-25529 | Medium | 5.1 | 2025-02-11 | Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static N… |
CVE-2025-25528 | Medium | 5.1 | 2025-02-11 | Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data… |
CVE-2025-25527 | Medium | 5.1 | 2025-02-11 | Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source… |
CVE-2025-25526 | Medium | 5.1 | 2025-02-11 | Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server… |
CVE-2025-25525 | Medium | 5.1 | 2025-02-11 | Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall… |
CVE-2025-25524 | Medium | 5.1 | 2025-02-11 | Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-… |
CVE-2025-25523 | Medium | 5.9 | 2025-02-11 | Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access… |
CVE-2025-25522 | High | 7.3 | 2025-02-11 | Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attack… |
CVE-2025-24956 | Medium | 6.2 | 2025-02-11 | A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numb… |
CVE-2024-46431 | High | 8.0 | 2025-02-10 | Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending sp… |
CVE-2025-1147 | Low | 3.1 | 2025-02-10 | A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen… |
CVE-2024-35106 | Medium | 4.6 | 2025-02-07 | NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2025-0303 | High | 8.8 | 2025-02-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer o… |
CVE-2024-57392 | High | 7.5 | 2025-02-06 | Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP… |
CVE-2025-23236 | High | 8.8 | 2025-02-06 | Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege… |
CVE-2025-23412 | High | 7.5 | 2025-02-05 | When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate. Note: Software versions which have rea… |
CVE-2025-0725 | High | 7.3 | 2025-02-05 | When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3… |
CVE-2025-0960 | Critical | 9.8 | 2025-02-04 | AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a d… |
CVE-2024-53320 | Critical | 9.8 | 2025-01-31 | Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadProject functions. |
CVE-2024-53319 | High | 7.5 | 2025-01-31 | A heap buffer overflow in the XML Text Escaping component of Qualisys C++ SDK commit a32a21a allows attackers to cause Denial of Service (DoS) via escaping spe… |
CVE-2024-24731 | High | 7.5 | 2025-01-31 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not requir… |
CVE-2024-23973 | High | 8.8 | 2025-01-31 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not requir… |
CVE-2024-23968 | High | 8.8 | 2025-01-31 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentica… |
CVE-2024-57513 | Medium | 6.5 | 2025-01-29 | A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4. |
CVE-2024-57510 | High | 7.8 | 2025-01-29 | Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_Memory… |
CVE-2024-57509 | High | 7.8 | 2025-01-29 | Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File… |
CVE-2024-57376 | High | 8.8 | 2025-01-28 | Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execut… |
CVE-2024-40674 | Medium | 5.3 | 2025-01-28 | In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lea… |
CVE-2024-6351 | Medium | 4.3 | 2025-01-28 | A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert |