CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 25)
Page 25 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28736 | Medium | 5.7 | 2023-08-11 | Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via… |
CVE-2023-37734 | Critical | 9.8 | 2023-08-10 | EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow. |
CVE-2023-36482 | Medium | 4.3 | 2023-08-08 | An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
CVE-2023-21649 | Medium | 6.7 | 2023-08-08 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
CVE-2023-39976 | Critical | 9.8 | 2023-08-08 | log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. |
CVE-2023-39550 | High | 8.8 | 2023-08-07 | Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_usern… |
CVE-2023-38926 | High | 8.8 | 2023-08-07 | Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set. |
CVE-2023-38925 | High | 8.8 | 2023-08-07 | Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi. |
CVE-2023-38924 | Medium | 6.5 | 2023-08-07 | Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi. |
CVE-2023-38922 | High | 8.8 | 2023-08-07 | Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_usern… |
CVE-2023-38591 | High | 8.8 | 2023-08-07 | Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi. |
CVE-2023-38412 | High | 8.8 | 2023-08-07 | Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi. |
CVE-2023-36499 | High | 8.8 | 2023-08-07 | Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi. |
CVE-2023-3766 | Medium | 5.9 | 2023-08-03 | A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs w… |
CVE-2023-3346 | Critical | 9.8 | 2023-08-03 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause… |
CVE-2023-31431 | Medium | 5.5 | 2023-08-02 | A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to cras… |
CVE-2023-31430 | Medium | 5.5 | 2023-08-02 | A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated priv… |
CVE-2023-3494 | High | 8.8 | 2023-08-01 | The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string in… |
CVE-2023-38559 | Medium | 5.5 | 2023-08-01 | A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of ser… |
CVE-2023-4055 | High | 7.5 | 2023-08-01 | When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie j… |
CVE-2023-38590 | High | 8.8 | 2023-07-28 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, ma… |
CVE-2023-33802 | Medium | 5.5 | 2023-07-26 | A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file. |
CVE-2023-38671 | High | 8.3 | 2023-07-26 | Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possibl… |
CVE-2023-35982 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-35981 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-35980 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-21406 | High | 7.1 | 2023-07-25 | Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod… |
CVE-2022-41793 | Critical | 9.8 | 2023-07-21 | An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed… |
CVE-2023-37758 | High | 7.5 | 2023-07-18 | D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi. |
CVE-2023-30383 | High | 7.5 | 2023-07-18 | TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to co… |
CVE-2023-31998 | High | 7.5 | 2023-07-18 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. |
CVE-2021-43072 | Medium | 6.7 | 2023-07-18 | A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6… |
CVE-2023-34140 | Medium | 6.5 | 2023-07-17 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch… |
CVE-2023-35802 | Critical | 9.8 | 2023-07-15 | IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevat… |
CVE-2023-37793 | Critical | 9.8 | 2023-07-14 | WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp. |
CVE-2023-21243 | Medium | 5.5 | 2023-07-13 | In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflo… |
CVE-2023-3618 | Medium | 6.5 | 2023-07-12 | A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_… |
CVE-2023-29414 | High | 7.8 | 2023-07-12 | A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local use… |
CVE-2020-20118 | Medium | 5.5 | 2023-07-11 | Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys dri… |
CVE-2023-34561 | Critical | 9.8 | 2023-07-11 | A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash lev… |
CVE-2023-24019 | High | 8.1 | 2023-07-06 | A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted n… |
CVE-2021-46896 | High | 7.5 | 2023-07-06 | Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332. |
CVE-2023-37245 | Critical | 9.1 | 2023-07-06 | Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem. |
CVE-2020-25969 | Critical | 9.8 | 2023-07-05 | gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest(). |
CVE-2023-35979 | Medium | 5.3 | 2023-07-05 | There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of thi… |
CVE-2023-24851 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
CVE-2023-22386 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
CVE-2023-21640 | Medium | 6.7 | 2023-07-04 | Memory corruption in Linux when the file upload API is called with parameters having large buffer. |
CVE-2023-21639 | Medium | 6.7 | 2023-07-04 | Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. |
CVE-2023-21635 | Medium | 6.7 | 2023-07-04 | Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. |
CVE-2023-36377 | High | 7.8 | 2023-07-03 | Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll fi… |
CVE-2023-36183 | High | 7.8 | 2023-07-03 | Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted fil… |
CVE-2023-35178 | High | 8.8 | 2023-06-30 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. |
CVE-2023-35176 | High | 8.8 | 2023-06-30 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through t… |
CVE-2023-26966 | Medium | 5.5 | 2023-06-29 | libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. |
CVE-2023-25433 | Medium | 5.5 | 2023-06-29 | libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap… |
CVE-2023-26616 | Critical | 9.8 | 2023-06-29 | D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo. |
CVE-2023-26612 | Critical | 9.8 | 2023-06-29 | D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo. |
CVE-2023-21517 | High | 8.8 | 2023-06-28 | Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. |
CVE-2015-20109 | Medium | 5.5 | 2023-06-25 | end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of s… |
CVE-2023-32423 | Medium | 6.5 | 2023-06-23 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 a… |
CVE-2023-32384 | High | 7.8 | 2023-06-23 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6… |
CVE-2023-23539 | High | 7.8 | 2023-06-23 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network sh… |
CVE-2023-36359 | High | 7.5 | 2023-06-22 | TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleList… |
CVE-2023-36358 | High | 7.7 | 2023-06-22 | TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlA… |
CVE-2023-36355 | Critical | 9.9 | 2023-06-22 | TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attacker… |
CVE-2023-36354 | High | 7.5 | 2023-06-22 | TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /u… |
CVE-2023-36243 | High | 7.8 | 2023-06-22 | FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c. |
CVE-2023-36239 | High | 8.8 | 2023-06-22 | libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c. |
CVE-2023-25435 | Medium | 5.5 | 2023-06-21 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. |
CVE-2023-0970 | High | 7.1 | 2023-06-21 | Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave con… |
CVE-2023-34563 | Critical | 9.8 | 2023-06-20 | netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication. |
CVE-2020-20703 | Critical | 9.8 | 2023-06-20 | Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. |
CVE-2022-48501 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48497 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48490 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2023-35856 | Critical | 9.8 | 2023-06-19 | A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machi… |
CVE-2023-35855 | Critical | 9.8 | 2023-06-19 | A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile co… |
CVE-2023-34832 | Critical | 9.8 | 2023-06-16 | TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4. |
CVE-2023-2686 | Critical | 9.8 | 2023-06-15 | Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack. |
CVE-2023-21143 | Medium | 5.5 | 2023-06-15 | In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial… |
CVE-2023-21136 | Medium | 5.5 | 2023-06-15 | In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial o… |
CVE-2023-21135 | High | 7.8 | 2023-06-15 | In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead… |
CVE-2023-1329 | Critical | 9.8 | 2023-06-14 | A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remot… |
CVE-2023-25434 | High | 8.8 | 2023-06-14 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. |
CVE-2022-28550 | Critical | 9.8 | 2023-06-13 | Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &… |
CVE-2023-34115 | Medium | 4.3 | 2023-06-13 | Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via lo… |
CVE-2023-32674 | Critical | 9.8 | 2023-06-12 | Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow. |
CVE-2023-34336 | High | 8.1 | 2023-06-12 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execut… |
CVE-2023-33457 | High | 8.8 | 2023-06-06 | In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash. |
CVE-2022-33230 | Medium | 6.7 | 2023-06-06 | Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host |
CVE-2022-33226 | Medium | 6.7 | 2023-06-06 | Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications. |
CVE-2022-33224 | Medium | 6.7 | 2023-06-06 | Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries. |
CVE-2022-48439 | Medium | 4.4 | 2023-06-06 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2023-27989 | Medium | 6.5 | 2023-06-05 | A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker… |
CVE-2023-32181 | Low | 3.3 | 2023-06-01 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files Th… |
CVE-2023-22652 | Low | 3.3 | 2023-06-01 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue… |
CVE-2023-24584 | High | 7.5 | 2023-06-01 | Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before… |
CVE-2021-45039 | Critical | 9.8 | 2023-05-31 | Multiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) offer an undocument… |