CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 15)
Page 15 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0146 | High | 7.8 | 2025-01-28 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this v… |
CVE-2025-24153 | Medium | 6.7 | 2025-01-27 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to exec… |
CVE-2025-24131 | Medium | 6.5 | 2025-01-27 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5… |
CVE-2024-48420 | High | 8.8 | 2025-01-27 | Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic. |
CVE-2024-48416 | High | 8.8 | 2025-01-27 | Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanDhcpsClientbinding. |
CVE-2024-39750 | High | 8.8 | 2025-01-25 | IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffe… |
CVE-2024-50697 | High | 8.1 | 2025-01-24 | In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bound… |
CVE-2024-57184 | Medium | 5.5 | 2025-01-24 | An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163… |
CVE-2022-47090 | High | 7.8 | 2025-01-24 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_… |
CVE-2024-53379 | High | 7.5 | 2025-01-23 | Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version (from 05/05/24) commit 64808a5e12c83b38f85c943dee011… |
CVE-2024-55194 | Critical | 9.8 | 2025-01-23 | OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h. |
CVE-2024-50664 | High | 7.8 | 2025-01-23 | gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box. |
CVE-2024-56914 | Medium | 5.7 | 2025-01-22 | D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp. |
CVE-2024-24419 | High | 7.5 | 2025-01-21 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_t… |
CVE-2024-24418 | High | 7.5 | 2025-01-21 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_p… |
CVE-2024-24417 | High | 7.5 | 2025-01-21 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_p… |
CVE-2024-24416 | High | 7.5 | 2025-01-21 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_a… |
CVE-2024-24451 | High | 7.5 | 2025-01-21 | A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial… |
CVE-2024-57545 | Medium | 5.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without lengt… |
CVE-2024-57544 | Medium | 5.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length ver… |
CVE-2024-57543 | Medium | 5.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length v… |
CVE-2024-57541 | Medium | 5.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without l… |
CVE-2024-57540 | Medium | 6.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verific… |
CVE-2024-57538 | Medium | 6.5 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack with… |
CVE-2024-57537 | Medium | 6.3 | 2025-01-21 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verificat… |
CVE-2018-9387 | High | 7.8 | 2025-01-18 | In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privil… |
CVE-2024-13503 | | 2025-01-17 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM (Updating signa… | |
CVE-2024-57703 | Critical | 9.8 | 2025-01-16 | Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The… |
CVE-2024-57578 | High | 8.8 | 2025-01-16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function. |
CVE-2024-57577 | Medium | 5.7 | 2025-01-16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. |
CVE-2025-22916 | Critical | 9.8 | 2025-01-16 | RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function. |
CVE-2025-22913 | Critical | 9.8 | 2025-01-16 | RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function. |
CVE-2025-22907 | Critical | 9.8 | 2025-01-16 | RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function. |
CVE-2025-22904 | Critical | 9.8 | 2025-01-16 | RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function. |
CVE-2024-53681 | Medium | 5.5 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discovery_nqn_store treats the subsysnqn strin… |
CVE-2024-57483 | Critical | 9.8 | 2025-01-14 | Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function. |
CVE-2024-57473 | Critical | 9.8 | 2025-01-14 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfull… |
CVE-2024-57482 | Critical | 9.8 | 2025-01-14 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who… |
CVE-2024-57480 | Critical | 9.8 | 2025-01-14 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully e… |
CVE-2024-57479 | Critical | 9.8 | 2025-01-14 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully… |
CVE-2024-57471 | Critical | 9.8 | 2025-01-14 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers wh… |
CVE-2024-39803 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39802 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39801 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39774 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can le… |
CVE-2024-39770 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39769 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39768 | Critical | 9.1 | 2025-01-14 | Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39756 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can… |
CVE-2024-39370 | Critical | 9.1 | 2025-01-14 | An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-39358 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead… |
CVE-2024-39299 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request c… |
CVE-2024-39294 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can le… |
CVE-2024-39288 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP reque… |
CVE-2024-37357 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead… |
CVE-2024-37184 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can… |
CVE-2024-36290 | Critical | 10.0 | 2025-01-14 | A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can l… |
CVE-2024-36272 | Critical | 9.1 | 2025-01-14 | A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lea… |
CVE-2024-6352 | Medium | 4.3 | 2025-01-13 | A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert |
CVE-2025-22946 | Critical | 9.8 | 2025-01-10 | Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution. |
CVE-2024-48806 | Medium | 6.8 | 2025-01-09 | Buffer Overflow vulnerability in Neat Board NFC v.1.20240620.0015 allows a physically proximate attackers to escalate privileges via a crafted payload to the p… |
CVE-2024-54887 | High | 8.0 | 2025-01-09 | TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCf… |
CVE-2024-10106 | Low | 3.7 | 2025-01-09 | A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer. |
CVE-2024-6350 | Medium | 6.5 | 2025-01-08 | A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automat… |
CVE-2024-56456 | Medium | 6.8 | 2025-01-08 | Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability ma… |
CVE-2024-56455 | Medium | 5.5 | 2025-01-08 | Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability ma… |
CVE-2024-56454 | Medium | 5.5 | 2025-01-08 | Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability ma… |
CVE-2024-56453 | Medium | 6.8 | 2025-01-08 | Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability ma… |
CVE-2024-56452 | Medium | 5.5 | 2025-01-08 | Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability ma… |
CVE-2024-56450 | Medium | 6.3 | 2025-01-08 | Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2018-4301 | Critical | 9.8 | 2025-01-08 | This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp. |
CVE-2024-40427 | High | 7.9 | 2025-01-07 | Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to exe… |
CVE-2024-46601 | High | 7.5 | 2025-01-07 | Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow. |
CVE-2024-45547 | High | 7.8 | 2025-01-06 | Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality. |
CVE-2024-45541 | High | 7.8 | 2025-01-06 | Memory corruption when IOCTL call is invoked from user-space to read board data. |
CVE-2024-21464 | High | 8.4 | 2025-01-06 | Memory corruption while processing IPA statistics, when there are no active clients registered. |
CVE-2024-47032 | High | 7.8 | 2025-01-03 | In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation o… |
CVE-2024-12988 | High | 7.3 | 2024-12-27 | A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of t… |
CVE-2024-56590 | High | 7.6 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet This fixes not che… |
CVE-2024-56557 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer The AD7923 was updated to… |
CVE-2024-53192 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexibl… |
CVE-2024-47864 | Medium | 5.3 | 2024-12-23 | home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated att… |
CVE-2020-6923 | Medium | 5.7 | 2024-12-19 | The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow. |
CVE-2024-12373 | | 2024-12-18 | A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing den… | |
CVE-2024-29646 | Critical | 9.8 | 2024-12-17 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields. |
CVE-2024-12194 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vuln… |
CVE-2024-37607 | Medium | 6.5 | 2024-12-17 | A Buffer overflow vulnerability in D-Link DAP-2555 REVA_FIRMWARE_1.20 allows remote attackers to cause a Denial of Service (DoS) via a crafted HTTP request. |
CVE-2024-37606 | Medium | 6.5 | 2024-12-17 | A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. |
CVE-2024-52949 | High | 7.5 | 2024-12-16 | iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible… |
CVE-2024-29671 | Critical | 9.8 | 2024-12-16 | Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component. |
CVE-2024-52066 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables an… |
CVE-2024-52065 | High | 7.1 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional on non-Windows (Persistence Service) allows Bu… |
CVE-2024-52064 | High | 7.1 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and… |
CVE-2024-52063 | High | 8.6 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overf… |
CVE-2024-52062 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and… |
CVE-2024-52061 | Critical | 9.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Se… |
CVE-2024-52060 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing S… |
CVE-2024-52059 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext… |
CVE-2024-31670 | Medium | 6.3 | 2024-12-12 | rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyld… |
CVE-2024-54105 | Medium | 5.1 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |