CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 28)
Page 28 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21494 | Medium | 5.6 | 2023-05-04 | Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2023-29856 | Critical | 9.8 | 2023-05-02 | D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary. |
CVE-2023-22924 | Medium | 4.9 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administr… |
CVE-2023-22922 | High | 7.5 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS… |
CVE-2023-27972 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. |
CVE-2023-27971 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. |
CVE-2023-28769 | Critical | 9.8 | 2023-04-27 | The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could… |
CVE-2023-30280 | Critical | 9.8 | 2023-04-26 | Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and c… |
CVE-2023-29596 | High | 7.8 | 2023-04-26 | Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function. |
CVE-2023-26930 | Medium | 5.5 | 2023-04-26 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Ve… |
CVE-2022-44232 | High | 7.5 | 2023-04-26 | libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a different vulnerability… |
CVE-2023-22917 | High | 7.5 | 2023-04-24 | A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00… |
CVE-2023-22915 | High | 7.5 | 2023-04-24 | A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware v… |
CVE-2023-2241 | Medium | 5.3 | 2023-04-22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObje… |
CVE-2023-25505 | High | 7.8 | 2023-04-22 | NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause… |
CVE-2021-33971 | High | 7.8 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total Security (http://www.360totalsecurity.com/) is affected by: Buffer Ov… |
CVE-2021-33975 | Critical | 10.0 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Total Security v10.8.0.1060 and v10.8.0.1213 allows attacker to escalate privileges. |
CVE-2021-33974 | High | 8.8 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: Buffer Overflow. The im… |
CVE-2021-33973 | High | 7.8 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escalate priveleges. |
CVE-2021-33972 | Critical | 10.0 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges. |
CVE-2023-27705 | High | 7.5 | 2023-04-17 | APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png. |
CVE-2022-33288 | Critical | 9.3 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
CVE-2022-33259 | Critical | 9.8 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received. |
CVE-2022-25740 | Critical | 9.8 | 2023-04-13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface |
CVE-2022-25678 | Critical | 9.8 | 2023-04-13 | Memory correction in modem due to buffer overwrite during coap connection |
CVE-2022-24350 | Medium | 5.5 | 2023-04-12 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within the comman… |
CVE-2020-24736 | Medium | 5.5 | 2023-04-11 | Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script. |
CVE-2022-47464 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47463 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47362 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47336 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47335 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2023-26733 | High | 7.8 | 2023-04-04 | Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tin… |
CVE-2020-23257 | High | 7.5 | 2023-04-04 | Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/… |
CVE-2020-19695 | Critical | 9.8 | 2023-04-04 | Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function. |
CVE-2020-19692 | Critical | 9.8 | 2023-04-04 | Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file. |
CVE-2023-0977 | Medium | 6.7 | 2023-04-03 | A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsv… |
CVE-2023-25076 | Critical | 9.8 | 2023-03-30 | A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df7… |
CVE-2023-28508 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overf… |
CVE-2023-28506 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2023-28505 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow… |
CVE-2023-28504 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2023-28502 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2022-42431 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2022-27643 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authenti… |
CVE-2023-26924 | Medium | 5.5 | 2023-03-27 | LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language… |
CVE-2023-25664 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is incl… |
CVE-2023-28772 | Medium | 6.7 | 2023-03-23 | An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. |
CVE-2023-1560 | Low | 2.8 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader… |
CVE-2023-28116 | High | 8.1 | 2023-03-17 | Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur… |
CVE-2023-1452 | Medium | 5.3 | 2023-03-17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-26769 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at co… |
CVE-2023-26768 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDat… |
CVE-2023-26767 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoi… |
CVE-2020-27507 | Critical | 9.8 | 2023-03-15 | The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server… |
CVE-2023-27590 | High | 7.8 | 2023-03-14 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin r… |
CVE-2023-27585 | High | 7.5 | 2023-03-14 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications… |
CVE-2021-45423 | Critical | 9.8 | 2023-03-13 | A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allocated on the stack… |
CVE-2023-26076 | High | 7.6 | 2023-03-13 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Aut… |
CVE-2023-27065 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function… |
CVE-2023-27064 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function… |
CVE-2023-27063 | Critical | 9.8 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward… |
CVE-2023-27062 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows att… |
CVE-2023-27061 | Critical | 9.8 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFil… |
CVE-2022-40540 | High | 8.4 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel. |
CVE-2022-33278 | High | 7.8 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
CVE-2022-33213 | High | 7.5 | 2023-03-10 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
CVE-2022-25655 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
CVE-2023-27853 | Critical | 9.8 | 2023-03-10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary c… |
CVE-2023-27852 | Critical | 9.8 | 2023-03-10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute a… |
CVE-2023-26075 | High | 7.6 | 2023-03-10 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 51… |
CVE-2023-26110 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation… |
CVE-2023-26109 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length… |
CVE-2023-20624 | Medium | 6.7 | 2023-03-07 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-1161 | Medium | 6.3 | 2023-03-06 | ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file |
CVE-2023-1190 | Medium | 4.8 | 2023-03-06 | A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the fil… |
CVE-2022-47664 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse |
CVE-2023-22757 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22756 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22755 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22754 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22753 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-20032 | Critical | 9.8 | 2023-03-01 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV ver… |
CVE-2023-23513 | Critical | 9.8 | 2023-02-27 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mo… |
CVE-2022-48260 | High | 7.5 | 2023-02-27 | There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions. |
CVE-2023-0996 | High | 7.8 | 2023-02-24 | There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image… |
CVE-2023-24809 | Medium | 5.5 | 2023-02-17 | NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" (call) command can cause… |
CVE-2021-33983 | High | 7.8 | 2023-02-17 | Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 allows local attacker to execute arbitrary code via the fltacc execution of the error_ref_sym functio… |
CVE-2021-33226 | Critical | 9.8 | 2023-02-17 | Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py fil… |
CVE-2023-24482 | Critical | 10.0 | 2023-02-14 | A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33)… |
CVE-2022-42444 | Medium | 4.9 | 2023-02-12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow… |
CVE-2022-40514 | Critical | 9.8 | 2023-02-12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
CVE-2022-33277 | High | 8.4 | 2023-02-12 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
CVE-2022-33232 | Critical | 9.3 | 2023-02-12 | Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory. |
CVE-2023-0687 | Medium | 4.6 | 2023-02-06 | A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of t… |
CVE-2021-37311 | High | 7.5 | 2023-02-03 | Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listening port. |
CVE-2023-22422 | High | 7.5 | 2023-02-01 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance a… |
CVE-2023-0617 | High | 7.5 | 2023-02-01 | A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork… |
CVE-2023-0612 | High | 7.5 | 2023-02-01 | A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp o… |