CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 4)
Page 4 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25275 | Medium | 6.2 | 2026-04-26 | Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attacker… |
CVE-2018-25273 | Medium | 6.2 | 2026-04-26 | CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License K… |
CVE-2018-25264 | Medium | 6.2 | 2026-04-26 | TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an ove… |
CVE-2018-25263 | High | 8.4 | 2026-04-26 | Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exc… |
CVE-2026-7033 | High | 8.8 | 2026-04-26 | A vulnerability has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter… |
CVE-2026-7032 | High | 8.8 | 2026-04-26 | A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument pa… |
CVE-2026-7031 | High | 8.8 | 2026-04-26 | A vulnerability was detected in Tenda F456 1.0.0.5. This impacts the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argu… |
CVE-2026-7030 | High | 8.8 | 2026-04-26 | A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation o… |
CVE-2026-7029 | High | 8.8 | 2026-04-26 | A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulat… |
CVE-2026-7019 | High | 8.8 | 2026-04-26 | A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulatio… |
CVE-2026-6988 | High | 8.8 | 2026-04-25 | A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the compone… |
CVE-2026-41476 | High | 8.8 | 2026-04-24 | Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a conne… |
CVE-2026-31623 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() A malicious USB device cl… |
CVE-2026-31622 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-col… |
CVE-2026-6632 | High | 8.8 | 2026-04-20 | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter… |
CVE-2026-6631 | High | 8.8 | 2026-04-20 | A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of… |
CVE-2026-6630 | High | 8.8 | 2026-04-20 | A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the componen… |
CVE-2026-6581 | High | 8.8 | 2026-04-19 | A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPInfoById of the file /goform/aspForm. Per… |
CVE-2026-6563 | High | 8.8 | 2026-04-19 | A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The mani… |
CVE-2026-6560 | High | 8.8 | 2026-04-19 | A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. S… |
CVE-2026-33337 | High | 7.5 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datu… |
CVE-2026-40170 | High | 7.5 | 2026-04-16 | ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport pa… |
CVE-2026-27820 | Critical | 9.8 | 2026-04-16 | zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vuln… |
CVE-2026-6384 | High | 7.3 | 2026-04-15 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond… |
CVE-2026-31280 | Medium | 6.5 | 2026-04-13 | An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (DoS) via supplyin… |
CVE-2026-6186 | High | 8.8 | 2026-04-13 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatSt… |
CVE-2026-34866 | Medium | 5.1 | 2026-04-13 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
CVE-2026-6157 | High | 8.8 | 2026-04-13 | A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so… |
CVE-2026-4153 | High | 7.8 | 2026-04-11 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2025-44560 | Critical | 9.8 | 2026-04-10 | owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking. |
CVE-2026-6014 | High | 8.8 | 2026-04-10 | A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component POST Reque… |
CVE-2026-6013 | High | 8.8 | 2026-04-10 | A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POS… |
CVE-2026-6012 | High | 8.8 | 2026-04-10 | A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the compone… |
CVE-2026-5984 | High | 8.8 | 2026-04-09 | A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Han… |
CVE-2026-5983 | High | 8.8 | 2026-04-09 | A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Re… |
CVE-2026-5982 | High | 8.8 | 2026-04-09 | A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAdvNetwork of the file /goform/formAdvNetwork of the componen… |
CVE-2026-5981 | High | 8.8 | 2026-04-09 | A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST… |
CVE-2025-59969 | Medium | 6.5 | 2026-04-09 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper… |
CVE-2026-5980 | High | 8.8 | 2026-04-09 | A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of the file /goform/formSetMACFilter of the component… |
CVE-2026-5979 | High | 8.8 | 2026-04-09 | A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of… |
CVE-2025-50673 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the http_lanport parameter in the /webgl.asp endpoint. |
CVE-2025-50672 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxz_dlink.asp endpoint. |
CVE-2025-50670 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can explo… |
CVE-2025-50669 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wan_ping parameter in the /wan_ping… |
CVE-2025-50668 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint. |
CVE-2025-50667 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wan_line_detection.asp endpoint. |
CVE-2025-50666 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker… |
CVE-2025-50665 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker… |
CVE-2025-50654 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint. |
CVE-2025-50653 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint. |
CVE-2025-50652 | High | 7.5 | 2026-04-08 | An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint. |
CVE-2025-50650 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.as… |
CVE-2025-50649 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint. |
CVE-2025-50648 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint. |
CVE-2025-50647 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint. |
CVE-2025-50646 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoin… |
CVE-2025-50645 | High | 7.5 | 2026-04-08 | A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint i… |
CVE-2025-50644 | High | 7.5 | 2026-04-08 | A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint. |
CVE-2025-52222 | High | 7.5 | 2026-04-08 | D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI… |
CVE-2025-52221 | Critical | 9.8 | 2026-04-08 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters. |
CVE-2025-45059 | High | 7.5 | 2026-04-08 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to… |
CVE-2025-45058 | High | 7.5 | 2026-04-08 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to c… |
CVE-2025-45057 | High | 7.5 | 2026-04-08 | D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attacker… |
CVE-2026-30075 | High | 7.5 | 2026-04-08 | OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU wit… |
CVE-2025-52908 | Critical | 9.8 | 2026-04-07 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W… |
CVE-2026-24660 | High | 8.1 | 2026-04-07 | A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead t… |
CVE-2026-20911 | Critical | 9.8 | 2026-04-07 | A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted mali… |
CVE-2026-20889 | Critical | 9.8 | 2026-04-07 | A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead t… |
CVE-2025-52909 | Critical | 9.8 | 2026-04-07 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W… |
CVE-2026-5734 | Critical | 9.8 | 2026-04-07 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memo… |
CVE-2025-65116 | Medium | 5.5 | 2026-04-07 | Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management… |
CVE-2026-21382 | High | 7.8 | 2026-04-06 | Memory Corruption when handling power management requests with improperly sized input/output buffers. |
CVE-2025-47389 | High | 7.8 | 2026-04-06 | Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. |
CVE-2026-31066 | Medium | 4.5 | 2026-04-06 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerabi… |
CVE-2026-31065 | Medium | 4.5 | 2026-04-06 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This… |
CVE-2026-31063 | Medium | 4.5 | 2026-04-06 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerabil… |
CVE-2026-31062 | Medium | 4.5 | 2026-04-06 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerab… |
CVE-2026-31061 | Medium | 4.5 | 2026-04-06 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerabil… |
CVE-2026-31060 | Medium | 4.5 | 2026-04-06 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerabilit… |
CVE-2026-31058 | Medium | 4.5 | 2026-04-06 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function… |
CVE-2026-5567 | High | 8.8 | 2026-04-05 | A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Dest… |
CVE-2026-5566 | High | 8.8 | 2026-04-05 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a… |
CVE-2018-25237 | Critical | 9.8 | 2026-04-03 | Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled… |
CVE-2026-34124 | Medium | 6.5 | 2026-04-02 | A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length res… |
CVE-2026-34875 | Critical | 9.8 | 2026-04-01 | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys. |
CVE-2026-31027 | Critical | 9.8 | 2026-04-01 | TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occu… |
CVE-2026-5279 | High | 8.8 | 2026-04-01 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-5164 | Medium | 6.7 | 2026-03-30 | A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap request. A… |
CVE-2026-1679 | High | 7.3 | 2026-03-28 | The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, co… |
CVE-2026-4976 | High | 8.8 | 2026-03-27 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. Th… |
CVE-2026-29976 | Medium | 6.2 | 2026-03-26 | Buffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0.1-43-g2ee308e allows a local attacker to obtain sensitive information via the getradiotapfield() f… |
CVE-2026-4862 | High | 8.8 | 2026-03-26 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfig… |
CVE-2024-51347 | High | 7.2 | 2026-03-25 | A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter with… |
CVE-2026-28875 | High | 7.5 | 2026-03-25 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial… |
CVE-2026-28859 | Medium | 4.3 | 2026-03-25 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4… |
CVE-2026-28858 | Critical | 9.8 | 2026-03-25 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected s… |
CVE-2026-28857 | Medium | 6.5 | 2026-03-25 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin… |
CVE-2026-28841 | Medium | 6.2 | 2026-03-25 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and u… |
CVE-2026-20664 | Medium | 4.3 | 2026-03-25 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin… |
CVE-2026-27654 | High | 8.2 | 2026-03-24 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX… |