CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 26)
Page 26 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32763 | High | 7.5 | 2023-05-28 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QT… |
CVE-2021-46886 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46885 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46884 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46883 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46882 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-46881 | High | 7.5 | 2023-05-26 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-33010 | Critical | 9.8 | 2023-05-24 | A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware version… |
CVE-2023-33009 | Critical | 9.8 | 2023-05-24 | A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions… |
CVE-2023-1424 | Critical | 10.0 | 2023-05-24 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELS… |
CVE-2023-23305 | Critical | 9.8 | 2023-05-23 | The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading binary resources. A malicious applicat… |
CVE-2023-23303 | Critical | 9.8 | 2023-05-23 | The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer… |
CVE-2023-23302 | Critical | 9.8 | 2023-05-23 | The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overf… |
CVE-2023-23300 | Critical | 9.8 | 2023-05-23 | The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer over… |
CVE-2023-27518 | High | 8.8 | 2023-05-23 | Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ve… |
CVE-2023-2597 | High | 7.0 | 2023-05-22 | In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not p… |
CVE-2023-20189 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20162 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20161 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20160 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20159 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20158 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20157 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20156 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-20024 | High | 8.6 | 2023-05-18 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cau… |
CVE-2023-31475 | Critical | 9.8 | 2023-05-11 | An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a… |
CVE-2021-45345 | High | 7.5 | 2023-05-10 | Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service via the WebcamServer.exe file. |
CVE-2023-22661 | High | 8.2 | 2023-05-10 | Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. |
CVE-2022-43507 | High | 7.5 | 2023-05-10 | Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privi… |
CVE-2022-36330 | Low | 1.9 | 2023-05-10 | A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My… |
CVE-2021-26354 | Medium | 5.5 | 2023-05-09 | Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initializ… |
CVE-2023-30085 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile… |
CVE-2023-30083 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c. |
CVE-2023-31979 | High | 7.8 | 2023-05-09 | Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c. |
CVE-2021-44283 | High | 7.5 | 2023-05-09 | A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f0ffd8a27616abdf77bd… |
CVE-2022-47499 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47498 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47497 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47496 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47495 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47494 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47491 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-47487 | Medium | 5.5 | 2023-05-09 | In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service w… |
CVE-2023-27968 | High | 7.1 | 2023-05-08 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-27957 | High | 7.8 | 2023-05-08 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted file may lead… |
CVE-2023-27956 | Medium | 5.5 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS… |
CVE-2023-27955 | Medium | 5.5 | 2023-05-08 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big… |
CVE-2023-27935 | High | 8.8 | 2023-05-08 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may… |
CVE-2023-27934 | High | 8.8 | 2023-05-08 | A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpecte… |
CVE-2023-23535 | Medium | 5.5 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 an… |
CVE-2023-23494 | Medium | 5.3 | 2023-05-08 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user in a privileged network position may be… |
CVE-2023-22786 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22785 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22784 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22783 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22782 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22781 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22780 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22779 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-30257 | High | 7.8 | 2023-05-08 | A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root. |
CVE-2023-29932 | Medium | 5.5 | 2023-05-05 | llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. |
CVE-2023-21504 | Medium | 5.6 | 2023-05-04 | Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid m… |
CVE-2023-21503 | Medium | 5.6 | 2023-05-04 | Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause inva… |
CVE-2023-21494 | Medium | 5.6 | 2023-05-04 | Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2023-29856 | Critical | 9.8 | 2023-05-02 | D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary. |
CVE-2023-22924 | Medium | 4.9 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administr… |
CVE-2023-22922 | High | 7.5 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS… |
CVE-2023-27972 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. |
CVE-2023-27971 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. |
CVE-2023-28769 | Critical | 9.8 | 2023-04-27 | The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could… |
CVE-2023-30280 | Critical | 9.8 | 2023-04-26 | Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and c… |
CVE-2023-29596 | High | 7.8 | 2023-04-26 | Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function. |
CVE-2023-26930 | Medium | 5.5 | 2023-04-26 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Ve… |
CVE-2022-44232 | High | 7.5 | 2023-04-26 | libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a different vulnerability… |
CVE-2023-22917 | High | 7.5 | 2023-04-24 | A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00… |
CVE-2023-22915 | High | 7.5 | 2023-04-24 | A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware v… |
CVE-2023-2241 | Medium | 5.3 | 2023-04-22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObje… |
CVE-2023-25505 | High | 7.8 | 2023-04-22 | NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause… |
CVE-2021-33971 | High | 7.8 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total Security (http://www.360totalsecurity.com/) is affected by: Buffer Ov… |
CVE-2021-33975 | Critical | 10.0 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Total Security v10.8.0.1060 and v10.8.0.1213 allows attacker to escalate privileges. |
CVE-2021-33974 | High | 8.8 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: Buffer Overflow. The im… |
CVE-2021-33973 | High | 7.8 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escalate priveleges. |
CVE-2021-33972 | Critical | 10.0 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges. |
CVE-2023-27705 | High | 7.5 | 2023-04-17 | APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png. |
CVE-2022-33288 | Critical | 9.3 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
CVE-2022-33259 | Critical | 9.8 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received. |
CVE-2022-25740 | Critical | 9.8 | 2023-04-13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface |
CVE-2022-25678 | Critical | 9.8 | 2023-04-13 | Memory correction in modem due to buffer overwrite during coap connection |
CVE-2022-24350 | Medium | 5.5 | 2023-04-12 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within the comman… |
CVE-2020-24736 | Medium | 5.5 | 2023-04-11 | Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script. |
CVE-2022-47464 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47463 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47362 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47336 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47335 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2023-26733 | High | 7.8 | 2023-04-04 | Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tin… |
CVE-2020-23257 | High | 7.5 | 2023-04-04 | Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/… |
CVE-2020-19695 | Critical | 9.8 | 2023-04-04 | Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function. |
CVE-2020-19692 | Critical | 9.8 | 2023-04-04 | Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file. |