CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 37)
Page 37 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20027 | High | 7.5 | 2021-06-14 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerabili… |
CVE-2021-21808 | High | 8.8 | 2021-06-11 | A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead t… |
CVE-2021-25408 | High | 7.8 | 2021-06-11 | A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. |
CVE-2021-34557 | Medium | 4.6 | 2021-06-10 | XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker… |
CVE-2020-24474 | High | 8.0 | 2021-06-09 | Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated… |
CVE-2021-0101 | High | 8.8 | 2021-06-09 | Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potent… |
CVE-2020-11292 | High | 7.8 | 2021-06-09 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2021-20699 | Critical | 9.8 | 2021-06-07 | Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.30… |
CVE-2017-20005 | Critical | 9.8 | 2021-06-06 | NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer… |
CVE-2021-30475 | Critical | 9.8 | 2021-06-04 | aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. |
CVE-2021-3569 | Medium | 5.5 | 2021-06-03 | A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad… |
CVE-2009-0948 | Critical | 9.8 | 2021-06-02 | Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02. |
CVE-2021-20236 | Critical | 9.8 | 2021-05-28 | A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending c… |
CVE-2021-31535 | Critical | 9.8 | 2021-05-27 | LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intende… |
CVE-2021-22908 | High | 8.8 | 2021-05-27 | A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to exec… |
CVE-2020-22028 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. |
CVE-2020-22026 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a De… |
CVE-2020-22024 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of… |
CVE-2020-22021 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Servi… |
CVE-2020-22020 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Deni… |
CVE-2020-22019 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Se… |
CVE-2020-22015 | High | 8.8 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user ob… |
CVE-2020-24020 | High | 8.8 | 2021-05-26 | Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length… |
CVE-2021-29202 | Medium | 6.7 | 2021-05-25 | A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for H… |
CVE-2021-30191 | High | 7.5 | 2021-05-25 | CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. |
CVE-2020-21041 | High | 7.5 | 2021-05-24 | Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of… |
CVE-2021-3438 | High | 7.8 | 2021-05-20 | A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege. |
CVE-2021-3200 | Low | 3.3 | 2021-05-18 | Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int… |
CVE-2021-29612 | Low | 3.6 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in Eigen implementation of `tf.raw_ops.Ba… |
CVE-2021-29540 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow to occur in `Conv2DBackpropFilter`. This is… |
CVE-2021-29520 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to `tf.raw_ops.Conv3DBackprop*` operations can resu… |
CVE-2021-29512 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. If the `splits` argument of `RaggedBincount` does not specify a valid `SparseTensor`(htt… |
CVE-2020-27823 | High | 7.8 | 2021-05-13 | A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest… |
CVE-2020-14354 | Low | 3.3 | 2021-05-13 | A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly a… |
CVE-2021-1915 | High | 7.8 | 2021-05-07 | Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2021-22547 | Medium | 6.3 | 2021-05-04 | In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in memory objects larger than the buffer an… |
CVE-2020-24918 | Critical | 9.8 | 2021-04-30 | A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a lo… |
CVE-2021-1493 | High | 8.5 | 2021-04-29 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-18032 | High | 7.8 | 2021-04-29 | Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial o… |
CVE-2021-0268 | High | 8.8 | 2021-04-22 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflo… |
CVE-2021-0249 | High | 8.1 | 2021-04-22 | On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow… |
CVE-2021-31255 | High | 7.8 | 2021-04-19 | Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted fil… |
CVE-2021-28549 | High | 7.8 | 2021-04-15 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file… |
CVE-2021-28548 | High | 7.8 | 2021-04-15 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file… |
CVE-2020-28592 | Critical | 9.8 | 2021-04-15 | A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially… |
CVE-2021-27707 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappi… |
CVE-2021-27706 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"I… |
CVE-2021-27705 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex… |
CVE-2021-26827 | High | 7.5 | 2021-04-14 | Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request w… |
CVE-2021-26805 | Medium | 5.5 | 2021-04-14 | Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file. |
CVE-2020-36120 | High | 7.5 | 2021-04-14 | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service (DoS). |
CVE-2021-29302 | High | 8.1 | 2021-04-12 | TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector i… |
CVE-2021-30481 | High | 8.0 | 2021-04-10 | Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow… |
CVE-2021-25328 | High | 8.8 | 2021-04-09 | Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker ca… |
CVE-2021-1405 | High | 7.5 | 2021-04-08 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote a… |
CVE-2020-36316 | Medium | 5.5 | 2021-04-07 | In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present. |
CVE-2021-30123 | High | 8.8 | 2021-04-07 | FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. |
CVE-2021-30184 | High | 7.8 | 2021-04-07 | GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a… |
CVE-2021-30045 | Critical | 9.1 | 2021-04-06 | SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function. |
CVE-2021-28874 | High | 7.8 | 2021-04-06 | SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file. |
CVE-2021-27698 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function. |
CVE-2021-27697 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function. |
CVE-2021-27357 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. |
CVE-2021-27343 | High | 7.5 | 2021-04-06 | SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/… |
CVE-2021-28202 | Medium | 4.9 | 2021-04-06 | The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28201 | Medium | 4.9 | 2021-04-06 | The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28200 | Medium | 4.9 | 2021-04-06 | The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overfl… |
CVE-2021-28199 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28198 | Medium | 4.9 | 2021-04-06 | The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buff… |
CVE-2021-28197 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28196 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, result… |
CVE-2021-28195 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2021-28194 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28193 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28192 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting… |
CVE-2021-28191 | Medium | 4.9 | 2021-04-06 | The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vuln… |
CVE-2021-28190 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, result… |
CVE-2021-28189 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28188 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28187 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting i… |
CVE-2021-28186 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28185 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28184 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28183 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, result… |
CVE-2021-28182 | Medium | 4.9 | 2021-04-06 | The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer ove… |
CVE-2021-28181 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28180 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resultin… |
CVE-2021-28179 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resu… |
CVE-2021-28178 | Medium | 4.9 | 2021-04-06 | The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28177 | Medium | 4.9 | 2021-04-06 | The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28176 | Medium | 4.9 | 2021-04-06 | The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vu… |
CVE-2021-28175 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2020-19596 | Critical | 9.8 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. |
CVE-2020-19595 | High | 7.5 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. |
CVE-2020-21588 | Medium | 5.5 | 2021-04-02 | Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox. |
CVE-2021-1763 | High | 7.8 | 2021-04-02 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 20… |
CVE-2020-9962 | High | 7.8 | 2021-04-02 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020… |
CVE-2021-20235 | High | 8.1 | 2021-04-01 | There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its sized changed, but the… |
CVE-2021-22992 | Critical | 9.8 | 2021-03-31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6… |
CVE-2020-24995 | High | 7.8 | 2021-03-30 | Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). |