CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 40)
Page 40 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2944 | High | 8.8 | 2020-04-15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Easi… |
CVE-2020-7261 | Medium | 6.1 | 2020-04-15 | Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local u… |
CVE-2015-5524 | Critical | 9.8 | 2020-04-10 | An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer overflow in datablock_write because the… |
CVE-2020-9499 | High | 7.2 | 2020-04-09 | Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, whi… |
CVE-2020-10814 | Medium | 5.5 | 2020-04-08 | A buffer overflow vulnerability in Code::Blocks 17.12 allows an attacker to execute arbitrary code via a crafted project file. |
CVE-2018-21066 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software. There is a buffer overflow in a Trustlet that can cause m… |
CVE-2018-21064 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is an array overflow in a driver's input booster. The Samsung ID is SV… |
CVE-2018-21050 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is a Buffer overflow in the esecomm Trustlet, leadin… |
CVE-2018-21044 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) software. The sem Trustlet has a buffer overflow that leads to arbitrary TEE code exec… |
CVE-2018-21090 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). The Exynos modem chipset has a baseband buffer overf… |
CVE-2017-18691 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos8890 chipsets) software. There are multiple Buffer Overflows in TSP sysfs cmd_s… |
CVE-2017-18690 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) sof… |
CVE-2017-18681 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). There are multiple buffer overflows in the… |
CVE-2017-18661 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in process_cipher_tdea. The Samsung ID is SVE-201… |
CVE-2017-18660 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in tlc_server. The Samsung ID is SVE-2017-8888 (J… |
CVE-2020-5734 | High | 7.5 | 2020-04-07 | Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during… |
CVE-2017-18693 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The… |
CVE-2020-6994 | Critical | 9.8 | 2020-04-03 | A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing o… |
CVE-2020-10599 | Critical | 9.8 | 2020-04-03 | VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which… |
CVE-2020-9067 | High | 8.0 | 2020-04-02 | There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the aff… |
CVE-2020-8423 | High | 7.2 | 2020-04-02 | A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary c… |
CVE-2020-3911 | Critical | 9.8 | 2020-04-01 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2… |
CVE-2020-3910 | Critical | 9.8 | 2020-04-01 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2… |
CVE-2020-3909 | Critical | 9.8 | 2020-04-01 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2… |
CVE-2020-10595 | Critical | 9.8 | 2020-03-31 | pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may o… |
CVE-2015-5684 | Critical | 9.8 | 2020-03-27 | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed… |
CVE-2020-6999 | Medium | 6.5 | 2020-03-26 | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer. |
CVE-2020-3807 | Critical | 9.8 | 2020-03-25 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006… |
CVE-2019-20578 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with P(9.0) (Exynos 9820 chipsets) software. A Buffer overflow occurs when loading the UH Partition during Se… |
CVE-2019-20572 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. load_kernel has a buffer overflow via untrusted data. The… |
CVE-2019-20562 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with P(9.0) (with TEEGRIS) software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE… |
CVE-2019-20558 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a Buffer Overflow in the Touch Screen Dr… |
CVE-2019-20548 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with P(9.0) devices (Qualcomm chipsets) software. There is a buffer overflow in the bootloader. The Samsung I… |
CVE-2020-10850 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The secure bootloade has a buffer overflow of th… |
CVE-2020-10835 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. There is a buffer overflow in baseband CP… |
CVE-2019-20545 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. A buffer overflow in the HDCP Trustlet affects secure TEEG… |
CVE-2020-10931 | High | 7.5 | 2020-03-24 | Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binar… |
CVE-2020-9760 | Critical | 9.8 | 2020-03-23 | An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflo… |
CVE-2019-5186 | High | 7.0 | 2020-03-23 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send… |
CVE-2020-3264 | High | 7.1 | 2020-03-19 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerabil… |
CVE-2020-10566 | High | 7.8 | 2020-03-14 | grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overf… |
CVE-2019-13202 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parame… |
CVE-2019-13201 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the LPD service. This would allow an u… |
CVE-2019-13197 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the URI paths of the web application t… |
CVE-2019-13196 | High | 8.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of severa… |
CVE-2019-13172 | Critical | 9.8 | 2020-03-13 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web applicati… |
CVE-2019-13169 | Critical | 9.8 | 2020-03-13 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web applic… |
CVE-2019-13168 | Critical | 9.8 | 2020-03-13 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This… |
CVE-2019-13165 | Critical | 9.8 | 2020-03-13 | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This wo… |
CVE-2019-13206 | High | 8.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in multiple parameters of the Document Bo… |
CVE-2019-13204 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple buffer overflow vulnerabilities in the IPP service. This would a… |
CVE-2020-0530 | High | 7.8 | 2020-03-12 | Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The l… |
CVE-2017-18350 | Medium | 5.9 | 2020-03-12 | bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer s… |
CVE-2020-0504 | High | 7.8 | 2020-03-12 | Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially en… |
CVE-2020-0501 | Medium | 5.5 | 2020-03-12 | Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local… |
CVE-2019-9099 | Critical | 9.8 | 2020-03-11 | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices… |
CVE-2019-15034 | Medium | 5.8 | 2020-03-10 | hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended con… |
CVE-2020-10188 | Critical | 9.8 | 2020-03-06 | utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overf… |
CVE-2019-20502 | High | 7.5 | 2020-03-05 | An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter. |
CVE-2019-2311 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-2300 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2019-14098 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2019-14097 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2019-14095 | Critical | 9.8 | 2020-03-05 | Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Co… |
CVE-2019-14068 | High | 7.8 | 2020-03-05 | Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In… |
CVE-2019-14045 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IO… |
CVE-2019-14031 | Critical | 9.8 | 2020-03-05 | Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2019-14030 | High | 7.8 | 2020-03-05 | The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto… |
CVE-2019-14027 | High | 7.8 | 2020-03-05 | Buffer overflow due to lack of upper bound check on channel length which is used for a loop. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2019-14026 | High | 7.8 | 2020-03-05 | Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2019-10593 | Critical | 9.8 | 2020-03-05 | Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2019-10586 | Critical | 9.8 | 2020-03-05 | Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10546 | Critical | 9.8 | 2020-03-05 | Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2018-20343 | High | 7.8 | 2020-03-02 | Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code… |
CVE-2019-5143 | High | 8.8 | 2020-02-25 | An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially craft… |
CVE-2015-7747 | High | 8.8 | 2020-02-19 | Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of… |
CVE-2020-4204 | High | 7.8 | 2020-02-19 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds… |
CVE-2020-8012 | Critical | 9.8 | 2020-02-18 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) componen… |
CVE-2013-7173 | Critical | 9.8 | 2020-02-13 | Belkin n750 routers have a buffer overflow. |
CVE-2014-1617 | Medium | 6.5 | 2020-02-13 | Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service. |
CVE-2020-8955 | Critical | 9.8 | 2020-02-12 | irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application… |
CVE-2019-17519 | High | 8.8 | 2020-02-12 | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers… |
CVE-2019-16336 | Medium | 6.5 | 2020-02-12 | The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the co… |
CVE-2019-19196 | Medium | 6.5 | 2020-02-12 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0… |
CVE-2015-7890 | Medium | 5.5 | 2020-02-12 | Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a d… |
CVE-2009-4067 | Medium | 6.8 | 2020-02-11 | Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to e… |
CVE-2019-17520 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on… |
CVE-2019-17518 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload lengt… |
CVE-2019-17517 | Medium | 5.7 | 2020-02-10 | The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2/3 devices does not properly restrict the L2CAP payload length… |
CVE-2019-17061 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes ce… |
CVE-2019-17060 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not… |
CVE-2019-14041 | High | 7.8 | 2020-02-07 | During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical addres… |
CVE-2020-8608 | Medium | 5.6 | 2020-02-06 | In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. |
CVE-2014-8271 | Medium | 6.8 | 2020-02-06 | Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name. |
CVE-2014-1958 | High | 8.8 | 2020-02-06 | Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a craf… |
CVE-2020-5208 | High | 7.7 | 2020-02-05 | It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffe… |
CVE-2020-8597 | Critical | 9.8 | 2020-02-03 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. |
CVE-2013-3489 | High | 7.8 | 2020-01-31 | Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file |
CVE-2013-3488 | High | 7.8 | 2020-01-31 | Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MP… |
CVE-2020-5211 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash o… |