Vulnerabilities (CVE)

Filtered by CWE-120
Total 3168 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-43548 1 Qualcomm 284 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 281 more 2025-01-10 N/A 7.3 HIGH
Memory corruption while parsing qcp clip with invalid chunk data size.
CVE-2023-32181 1 Opensuse 1 Libeconf 2025-01-10 N/A 3.3 LOW
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.
CVE-2023-43540 1 Qualcomm 58 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 55 more 2025-01-10 N/A 8.4 HIGH
Memory corruption while processing the IOCTL FM HCI WRITE request.
CVE-2023-28582 1 Qualcomm 86 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 83 more 2025-01-10 N/A 9.8 CRITICAL
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
CVE-2024-21464 1 Qualcomm 42 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 39 more 2025-01-10 N/A 8.4 HIGH
Memory corruption while processing IPA statistics, when there are no active clients registered.
CVE-2021-45039 1 Uniview 1 Camera Firmware 2025-01-10 N/A 9.8 CRITICAL
Multiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using this buffer overflow, a remote attacker can start the telnetd service. This service has a hardcoded default username and password (root/123456). Although it has a restrictive shell, this can be easily bypassed via the built-in ECHO shell command.
CVE-2024-30962 1 Openrobotics 1 Robot Operating System 2025-01-09 N/A 7.8 HIGH
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
CVE-2023-33023 1 Qualcomm 576 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 573 more 2025-01-09 N/A 8.4 HIGH
Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-28547 1 Qualcomm 604 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 601 more 2025-01-09 N/A 8.4 HIGH
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2021-47040 1 Linux 1 Linux Kernel 2025-01-09 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out previous attempt did nothing useful, see d81269fecb8ce ("io_uring: fix provide_buffers sign extension"). Do that with help of check_<op>_overflow helpers. And fix struct io_provide_buf::len type, as it doesn't make much sense to keep it signed.
CVE-2024-10106 2025-01-09 N/A 3.7 LOW
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer.
CVE-2024-40427 2025-01-08 N/A 7.9 HIGH
Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute
CVE-2024-6350 2025-01-08 N/A 6.5 MEDIUM
A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically.
CVE-2018-4301 2025-01-08 N/A 9.8 CRITICAL
This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp.
CVE-2023-33457 1 Sogou 1 C\+\+ Workflow 2025-01-08 N/A 8.8 HIGH
In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash.
CVE-2024-0156 1 Dell 1 Digital Delivery 2025-01-08 N/A 7.0 HIGH
Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation.
CVE-2022-48439 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-07 N/A 4.4 MEDIUM
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2024-48956 2025-01-06 N/A 9.8 CRITICAL
Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution.
CVE-2021-47485 1 Linux 1 Linux Kernel 2025-01-06 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
CVE-2023-25434 1 Libtiff 1 Libtiff 2025-01-06 N/A 8.8 HIGH
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.