CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 7)
Page 7 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1155 | High | 8.8 | 2026-01-19 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi-bin/cste… |
CVE-2026-1143 | High | 8.8 | 2026-01-19 | A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Execut… |
CVE-2026-1140 | High | 8.8 | 2026-01-19 | A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in… |
CVE-2026-1139 | High | 8.8 | 2026-01-19 | A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulatio… |
CVE-2026-1138 | High | 8.8 | 2026-01-19 | A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. Executing a manipulation can lead to bu… |
CVE-2026-1137 | High | 8.8 | 2026-01-19 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formWebAuthGlobalConfig. Performing… |
CVE-2026-1110 | Medium | 5.3 | 2026-01-18 | A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes b… |
CVE-2026-1109 | Medium | 5.3 | 2026-01-18 | A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_request. The man… |
CVE-2026-1108 | Medium | 5.3 | 2026-01-18 | A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dum… |
CVE-2021-47815 | High | 7.5 | 2026-01-16 | Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can p… |
CVE-2021-47814 | High | 7.5 | 2026-01-16 | NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Att… |
CVE-2021-47813 | High | 7.5 | 2026-01-16 | Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input… |
CVE-2021-47798 | Critical | 9.8 | 2026-01-16 | NoteBurner 2.35 contains a buffer overflow vulnerability in the license code input field that allows attackers to crash the application. Attackers can generate… |
CVE-2021-47797 | High | 7.5 | 2026-01-16 | Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the a… |
CVE-2023-54328 | Medium | 6.5 | 2026-01-13 | AimOne Video Converter 2.04 Build 103 contains a buffer overflow vulnerability in its registration form that causes application crashes. Attackers can generate… |
CVE-2022-50922 | Critical | 9.8 | 2026-01-13 | Audio Conversion Wizard v2.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory with a specially c… |
CVE-2026-22861 | High | 8.8 | 2026-01-13 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2025-29329 | Critical | 9.8 | 2026-01-12 | Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute arbitrary code by s… |
CVE-2026-0841 | High | 8.8 | 2026-01-11 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formPictureUrl. The manipulation of… |
CVE-2026-0840 | High | 8.8 | 2026-01-11 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerability is the function strcpy of the file /goform/formConfigNot… |
CVE-2026-0839 | High | 8.8 | 2026-01-11 | A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulation of the arg… |
CVE-2026-0838 | High | 8.8 | 2026-01-11 | A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performing a manipula… |
CVE-2026-0837 | High | 8.8 | 2026-01-11 | A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFireWall. Such manipulation of the argumen… |
CVE-2026-0836 | High | 8.8 | 2026-01-11 | A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formConfigFastDirectionW. This mani… |
CVE-2026-21639 | High | 8.8 | 2026-01-08 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE… |
CVE-2025-69260 | High | 7.5 | 2026-01-08 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected instal… |
CVE-2025-69259 | High | 7.5 | 2026-01-08 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affect… |
CVE-2025-69258 | Critical | 9.8 | 2026-01-08 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executab… |
CVE-2026-22184 | High | 7.8 | 2026-01-07 | zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to th… |
CVE-2025-47394 | High | 7.8 | 2026-01-07 | Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. |
CVE-2025-47388 | High | 7.8 | 2026-01-07 | Memory corruption while passing pages to DSP with an unaligned starting address. |
CVE-2025-47335 | Medium | 6.7 | 2026-01-07 | Memory corruption while parsing clock configuration data for a specific hardware type. |
CVE-2025-47334 | Medium | 6.7 | 2026-01-07 | Memory corruption while processing shared command buffer packet between camera userspace and kernel. |
CVE-2026-0640 | High | 8.8 | 2026-01-06 | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the ar… |
CVE-2025-53966 | High | 8.4 | 2026-01-05 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overf… |
CVE-2025-49495 | High | 8.4 | 2026-01-05 | An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor command leads to a buffe… |
CVE-2025-15462 | High | 8.8 | 2026-01-05 | A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the a… |
CVE-2025-15461 | High | 8.8 | 2026-01-05 | A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a manipulation of… |
CVE-2025-15460 | High | 8.8 | 2026-01-05 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpClientConfig. Performing a manipulation… |
CVE-2025-15459 | High | 8.8 | 2026-01-05 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser. Such manipu… |
CVE-2025-48721 | Medium | 6.5 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they c… |
CVE-2025-52872 | High | 8.1 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then ex… |
CVE-2025-52864 | High | 8.1 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then ex… |
CVE-2025-52863 | High | 8.1 | 2026-01-02 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then ex… |
CVE-2025-15431 | High | 8.8 | 2026-01-02 | A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing a manipulation of the… |
CVE-2025-15430 | High | 8.8 | 2026-01-02 | A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formFtpServerShareDirSelcet. Perfor… |
CVE-2025-15429 | High | 8.8 | 2026-01-02 | A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCli… |
CVE-2025-15428 | High | 8.8 | 2026-01-02 | A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the arg… |
CVE-2025-15356 | High | 8.8 | 2025-12-30 | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation… |
CVE-2025-15218 | High | 8.8 | 2025-12-30 | A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSe… |
CVE-2025-15217 | High | 8.8 | 2025-12-30 | A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Perform… |
CVE-2025-15215 | High | 8.8 | 2025-12-30 | A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the… |
CVE-2025-15193 | High | 8.8 | 2025-12-29 | A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulati… |
CVE-2025-15189 | High | 8.8 | 2025-12-29 | A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation o… |
CVE-2025-15092 | High | 8.8 | 2025-12-26 | A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the… |
CVE-2025-15091 | High | 8.8 | 2025-12-26 | A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation… |
CVE-2025-15090 | High | 8.8 | 2025-12-25 | A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The man… |
CVE-2025-15089 | High | 8.8 | 2025-12-25 | A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argu… |
CVE-2022-50689 | Medium | 6.2 | 2025-12-22 | Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field… |
CVE-2022-50687 | Medium | 5.5 | 2025-12-22 | Cobian Backup 11 Gravity 11.2.0.582 contains a denial of service vulnerability in the FTP password input field that allows attackers to crash the application… |
CVE-2025-8065 | Medium | 6.5 | 2025-12-20 | A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6. When processing XML tags with namespac… |
CVE-2025-50681 | High | 7.5 | 2025-12-19 | igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership report packet with… |
CVE-2025-47372 | Critical | 9.0 | 2025-12-18 | Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication. |
CVE-2025-47321 | High | 7.8 | 2025-12-18 | Memory corruption while copying packets received from unix clients. |
CVE-2025-68114 | Medium | 4.8 | 2025-12-17 | Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf… |
CVE-2025-66647 | Critical | 9.8 | 2025-12-17 | RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. A v… |
CVE-2025-43501 | Medium | 4.3 | 2025-12-17 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2… |
CVE-2025-67074 | Medium | 6.5 | 2025-12-17 | A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service… |
CVE-2025-67073 | Critical | 9.8 | 2025-12-17 | A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service… |
CVE-2025-65834 | Critical | 9.8 | 2025-12-16 | Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and heig… |
CVE-2025-50401 | Critical | 9.8 | 2025-12-16 | Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password. |
CVE-2025-50398 | Critical | 9.8 | 2025-12-16 | Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password. |
CVE-2025-10889 | High | 7.8 | 2025-12-16 | A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage… |
CVE-2025-10887 | High | 7.8 | 2025-12-16 | A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage th… |
CVE-2025-10886 | High | 7.8 | 2025-12-16 | A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage th… |
CVE-2025-59947 | Critical | 9.0 | 2025-12-15 | NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscri… |
CVE-2023-53874 | Critical | 9.8 | 2025-12-15 | GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attack… |
CVE-2025-14709 | Critical | 9.8 | 2025-12-15 | A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshe… |
CVE-2025-14708 | Critical | 9.8 | 2025-12-15 | A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_ser… |
CVE-2025-14656 | High | 8.8 | 2025-12-14 | A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the ar… |
CVE-2025-43532 | Low | 2.8 | 2025-12-12 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq… |
CVE-2025-43520 | Medium | 5.5 | 2025-12-12 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Seq… |
CVE-2025-36931 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2025-36930 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2025-36928 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
CVE-2025-36927 | High | 7.8 | 2025-12-11 | In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2025-36924 | High | 8.0 | 2025-12-11 | In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remot… |
CVE-2025-36917 | Medium | 6.5 | 2025-12-11 | In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2025-14535 | Critical | 9.8 | 2025-12-11 | A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulat… |
CVE-2025-14534 | Critical | 9.8 | 2025-12-11 | A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endp… |
CVE-2025-14526 | High | 8.8 | 2025-12-11 | A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation of the arg… |
CVE-2025-65288 | Medium | 6.5 | 2025-12-09 | A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN… |
CVE-2025-14310 | | 2025-12-09 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4. | |
CVE-2025-14196 | High | 8.8 | 2025-12-07 | A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of… |
CVE-2025-14191 | High | 8.8 | 2025-12-07 | A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such ma… |
CVE-2025-14187 | High | 7.2 | 2025-12-07 | A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of… |
CVE-2025-14141 | High | 8.8 | 2025-12-06 | A flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formArpBindConfig. Executing manipulation of… |
CVE-2025-14140 | Medium | 6.5 | 2025-12-06 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/websHostFilter. Performing manipulati… |
CVE-2025-14139 | Medium | 5.7 | 2025-12-06 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Impacted is the function strcpy of the file /goform/formConfigDnsFilterGlobal. Such man… |
CVE-2025-64053 | High | 7.5 | 2025-12-05 | A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via craf… |