CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 23)
Page 23 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43540 | High | 8.4 | 2024-03-04 | Memory corruption while processing the IOCTL FM HCI WRITE request. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2024-27572 | High | 7.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attac… |
CVE-2024-20267 | High | 8.6 | 2024-02-29 | A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to une… |
CVE-2023-6881 | High | 7.3 | 2024-02-29 | Possible buffer overflow in is_mount_point |
CVE-2021-47040 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow… |
CVE-2024-1786 | High | 7.5 | 2024-02-23 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some un… |
CVE-2024-24479 | High | 7.5 | 2024-02-21 | A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs com… |
CVE-2024-24474 | High | 8.8 | 2024-02-20 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of… |
CVE-2024-25196 | Low | 3.3 | 2024-02-20 | Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vu… |
CVE-2024-26134 | High | 7.5 | 2024-02-19 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior t… |
CVE-2023-52377 | High | 7.4 | 2024-02-18 | Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2023-52370 | Critical | 9.8 | 2024-02-18 | Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access. |
CVE-2023-52366 | High | 7.5 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2023-52365 | Medium | 5.3 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2024-25373 | Medium | 4.6 | 2024-02-15 | Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function. |
CVE-2024-20723 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-23093 | Medium | 6.5 | 2024-02-15 | ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP hea… |
CVE-2022-23085 | High | 8.2 | 2024-02-15 | A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memo… |
CVE-2024-25165 | High | 7.8 | 2024-02-14 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. |
CVE-2023-43519 | High | 7.3 | 2024-02-06 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
CVE-2023-33077 | Medium | 6.7 | 2024-02-06 | Memory corruption in HLOS while converting from authorization token to HIDL vector. |
CVE-2023-33072 | Critical | 9.3 | 2024-02-06 | Memory corruption in Core while processing control functions. |
CVE-2023-33069 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
CVE-2023-33068 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing IIR config data from AFE calibration block. |
CVE-2023-45037 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45036 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45035 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41292 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41280 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41279 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41278 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41277 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41276 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41275 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41273 | Medium | 5.5 | 2024-02-02 | A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow auth… |
CVE-2024-0338 | High | 7.3 | 2024-02-02 | A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug… |
CVE-2024-24736 | High | 7.5 | 2024-01-29 | The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issue to CVE-2004-1558. |
CVE-2024-23621 | Critical | 10.0 | 2024-01-26 | A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve… |
CVE-2024-23617 | Critical | 9.6 | 2024-01-26 | A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerab… |
CVE-2024-23616 | Critical | 10.0 | 2024-01-26 | A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability… |
CVE-2024-23615 | Critical | 10.0 | 2024-01-26 | A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to a… |
CVE-2024-23614 | Critical | 10.0 | 2024-01-26 | A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to ac… |
CVE-2024-23613 | Critical | 10.0 | 2024-01-26 | A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit… |
CVE-2024-22749 | High | 7.8 | 2024-01-25 | GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577 |
CVE-2023-51888 | High | 7.5 | 2024-01-24 | Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string… |
CVE-2023-51886 | High | 7.5 | 2024-01-24 | Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath. |
CVE-2023-51885 | Critical | 9.8 | 2024-01-24 | Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component. |
CVE-2024-0732 | Medium | 5.3 | 2024-01-19 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Han… |
CVE-2024-0731 | Medium | 5.3 | 2024-01-19 | A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command Ha… |
CVE-2024-22919 | High | 7.8 | 2024-01-19 | swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587. |
CVE-2024-22912 | High | 7.8 | 2024-01-19 | A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution. |
CVE-2023-5130 | High | 8.2 | 2024-01-18 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a speciall… |
CVE-2023-43824 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, una… |
CVE-2023-43823 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauth… |
CVE-2023-43822 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote… |
CVE-2023-43821 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remot… |
CVE-2023-43820 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A re… |
CVE-2023-43819 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, u… |
CVE-2023-43818 | High | 8.8 | 2024-01-18 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft. A remote, unauthenticated attacker can exploit this vulnerability by enticin… |
CVE-2023-43817 | High | 7.5 | 2024-01-18 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file. An anonymous… |
CVE-2023-43816 | Medium | 6.3 | 2024-01-18 | A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file. A… |
CVE-2023-43815 | High | 7.1 | 2024-01-18 | A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wScreenDESCTextLen field of a DPS fi… |
CVE-2024-22419 | High | 7.3 | 2024-01-18 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The `concat` built-in can write over the bounds of the memory buffer that was all… |
CVE-2024-0645 | High | 7.3 | 2024-01-17 | Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitori… |
CVE-2023-6334 | Medium | 5.3 | 2024-01-16 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue af… |
CVE-2023-52103 | Critical | 9.8 | 2024-01-16 | Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2011-10005 | Medium | 6.3 | 2024-01-16 | A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The mani… |
CVE-2022-48620 | Critical | 9.8 | 2024-01-12 | uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. |
CVE-2023-40250 | High | 8.8 | 2024-01-12 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCel… |
CVE-2023-32401 | High | 7.8 | 2024-01-10 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. Parsing… |
CVE-2023-47995 | Medium | 6.5 | 2024-01-09 | Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of… |
CVE-2023-7222 | High | 7.2 | 2024-01-09 | A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of th… |
CVE-2024-0213 | High | 8.2 | 2024-01-09 | A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service… |
CVE-2023-7221 | Critical | 9.8 | 2024-01-09 | A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecg… |
CVE-2023-38583 | High | 7.8 | 2024-01-08 | A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can l… |
CVE-2023-7208 | High | 8.0 | 2024-01-07 | A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file… |
CVE-2023-45044 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45043 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45042 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45041 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45040 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45039 | Low | 3.8 | 2024-01-05 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-50991 | High | 7.5 | 2024-01-05 | Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp pa… |
CVE-2023-52309 | High | 8.2 | 2024-01-03 | Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damag… |
CVE-2023-52307 | High | 8.2 | 2024-01-03 | Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. |
CVE-2023-52304 | High | 8.2 | 2024-01-03 | Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. |
CVE-2023-49556 | Medium | 5.5 | 2024-01-03 | Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/exp… |
CVE-2023-33113 | High | 8.4 | 2024-01-02 | Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
CVE-2023-33085 | High | 7.8 | 2024-01-02 | Memory corruption in wearables while processing data from AON. |
CVE-2023-33030 | Critical | 9.3 | 2024-01-02 | Memory corruption in HLOS while running playready use-case. |
CVE-2023-33025 | Critical | 9.8 | 2024-01-02 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. |
CVE-2023-50096 | High | 7.5 | 2024-01-01 | STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is… |
CVE-2023-51434 | Critical | 9.3 | 2023-12-29 | Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution. |
CVE-2023-47091 | High | 7.5 | 2023-12-25 | An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 thr… |
CVE-2023-51771 | Critical | 9.8 | 2023-12-25 | In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI. |
CVE-2023-7095 | Critical | 9.8 | 2023-12-25 | A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the… |
CVE-2023-48704 | High | 7.0 | 2023-12-22 | ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow iss… |
CVE-2023-50986 | Critical | 9.8 | 2023-12-20 | Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function. |
CVE-2023-50628 | Critical | 9.8 | 2023-12-20 | Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component. |