CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 24)
Page 24 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4260 | Medium | 6.3 | 2023-09-27 | Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system. |
CVE-2023-4259 | High | 7.1 | 2023-09-26 | Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code. |
CVE-2023-43131 | Critical | 9.8 | 2023-09-25 | General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow. |
CVE-2023-41299 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39409 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39408 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-23364 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows… |
CVE-2023-23363 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows r… |
CVE-2023-36109 | Critical | 9.8 | 2023-09-20 | Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jer… |
CVE-2023-42320 | Critical | 9.8 | 2023-09-18 | Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter… |
CVE-2023-36659 | Critical | 9.8 | 2023-09-15 | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of se… |
CVE-2022-48475 | High | 8.2 | 2023-09-12 | Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Over… |
CVE-2023-39068 | High | 7.5 | 2023-09-11 | Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.0… |
CVE-2023-39063 | High | 7.8 | 2023-09-11 | Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wiza… |
CVE-2020-19320 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. |
CVE-2020-19319 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. |
CVE-2023-4582 | High | 8.8 | 2023-09-11 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory… |
CVE-2023-42278 | High | 7.5 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). |
CVE-2023-42277 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. |
CVE-2023-42276 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. |
CVE-2023-41064 | High | 7.8 | 2023-09-07 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura… |
CVE-2023-3471 | High | 8.6 | 2023-09-06 | Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code. |
CVE-2023-32379 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app may be able to execute arbitrary code wi… |
CVE-2023-32356 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28215 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28214 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28213 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28212 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28211 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28210 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28209 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28544 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21662 | High | 7.8 | 2023-09-05 | Memory corruption in Core Platform while printing the response buffer in log. |
CVE-2023-40968 | High | 7.5 | 2023-09-01 | Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045c address. |
CVE-2023-36187 | Critical | 9.8 | 2023-09-01 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to… |
CVE-2022-46527 | High | 7.5 | 2023-09-01 | ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser. |
CVE-2023-40589 | Medium | 4.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflo… |
CVE-2023-4163 | Medium | 4.4 | 2023-08-31 | In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large inp… |
CVE-2023-38975 | High | 7.5 | 2023-08-29 | * Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component. |
CVE-2023-24548 | Medium | 5.3 | 2023-08-29 | On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause… |
CVE-2023-41361 | Critical | 9.8 | 2023-08-29 | An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version. |
CVE-2023-40998 | High | 7.5 | 2023-08-28 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size com… |
CVE-2023-40997 | High | 7.5 | 2023-08-28 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet. |
CVE-2023-36481 | High | 7.5 | 2023-08-28 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W92… |
CVE-2023-40166 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFro… |
CVE-2023-40164 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextSt… |
CVE-2023-40036 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::Ha… |
CVE-2023-40031 | High | 7.8 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This… |
CVE-2023-36198 | High | 7.5 | 2023-08-25 | Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessage function. |
CVE-2023-39742 | Medium | 5.5 | 2023-08-25 | giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. |
CVE-2022-3742 | Medium | 6.7 | 2023-08-23 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to ex… |
CVE-2023-20168 | High | 7.1 | 2023-08-23 | A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device… |
CVE-2023-4041 | Critical | 9.8 | 2023-08-23 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon… |
CVE-2022-29654 | Medium | 5.5 | 2023-08-22 | Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file. |
CVE-2021-32422 | High | 7.5 | 2023-08-22 | dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. |
CVE-2020-35357 | Medium | 6.5 | 2023-08-22 | A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing… |
CVE-2020-25887 | High | 8.8 | 2023-08-22 | Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. |
CVE-2020-24295 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted ps… |
CVE-2020-24294 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of servic… |
CVE-2020-24293 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of c… |
CVE-2020-24292 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafte… |
CVE-2020-22628 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. |
CVE-2020-22524 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. |
CVE-2020-22219 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. |
CVE-2020-21469 | Medium | 4.4 | 2023-08-22 | An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the v… |
CVE-2020-21428 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts vi… |
CVE-2020-21427 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other… |
CVE-2020-21426 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other im… |
CVE-2023-39750 | Critical | 9.8 | 2023-08-21 | D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted P… |
CVE-2023-39749 | Critical | 9.8 | 2023-08-21 | D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. |
CVE-2023-39747 | Critical | 9.8 | 2023-08-21 | TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurity… |
CVE-2023-39745 | High | 7.5 | 2023-08-21 | TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRu… |
CVE-2023-39454 | Critical | 9.8 | 2023-08-18 | Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code. |
CVE-2023-39674 | Critical | 9.8 | 2023-08-18 | D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. |
CVE-2023-39673 | Critical | 9.8 | 2023-08-18 | Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). |
CVE-2023-39672 | Critical | 9.8 | 2023-08-18 | Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. |
CVE-2023-39671 | Critical | 9.8 | 2023-08-18 | D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. |
CVE-2023-39670 | Critical | 9.8 | 2023-08-18 | Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. |
CVE-2023-39668 | Critical | 9.8 | 2023-08-18 | D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function. |
CVE-2023-39667 | Critical | 9.8 | 2023-08-18 | D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function. |
CVE-2023-39666 | Critical | 9.8 | 2023-08-18 | D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 par… |
CVE-2023-39665 | Critical | 9.8 | 2023-08-18 | D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter. |
CVE-2023-4029 | Medium | 6.7 | 2023-08-17 | A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and eleva… |
CVE-2023-4028 | Medium | 6.7 | 2023-08-17 | A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access an… |
CVE-2023-34419 | Medium | 6.7 | 2023-08-17 | A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated pr… |
CVE-2023-38850 | Medium | 5.5 | 2023-08-15 | Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the codedoc.c:1742 comppnent. |
CVE-2023-29468 | Critical | 9.8 | 2023-08-14 | The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can… |
CVE-2023-39386 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps t… |
CVE-2023-39389 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-39388 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-4265 | Medium | 6.4 | 2023-08-12 | Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_… |
CVE-2021-28835 | High | 7.8 | 2023-08-11 | Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file. |
CVE-2021-28427 | High | 7.8 | 2023-08-11 | Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file. |
CVE-2020-35990 | Medium | 5.5 | 2023-08-11 | Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attacke… |
CVE-2020-28840 | High | 7.8 | 2023-08-11 | Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of servic… |
CVE-2020-24222 | High | 7.8 | 2023-08-11 | Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an i… |