Vulnerabilities (CVE)

Filtered by CWE-120
Total 3353 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-52365 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 5.3 MEDIUM
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-46557 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-37632 1 Totolink 2 A3700r, A3700r Firmware 2025-03-13 N/A 9.8 CRITICAL
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
CVE-2024-30584 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 N/A 9.8 CRITICAL
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.
CVE-2024-30593 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 N/A 9.8 CRITICAL
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function.
CVE-2024-46586 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-46565 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2023-52364 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 6.3 MEDIUM
Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.
CVE-2023-52551 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 5.3 MEDIUM
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52549 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 7.5 HIGH
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52550 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 7.5 HIGH
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52377 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 7.4 HIGH
Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.
CVE-2023-52370 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 9.8 CRITICAL
Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.
CVE-2023-52366 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 7.5 HIGH
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2023-0996 1 Struktur 1 Libheif 2025-03-11 N/A 7.8 HIGH
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.
CVE-2022-48260 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2025-03-11 N/A 7.5 HIGH
There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.
CVE-2023-22753 1 Arubanetworks 2 Arubaos, Sd-wan 2025-03-11 N/A 8.1 HIGH
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2024-53695 2025-03-07 N/A N/A
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later
CVE-2022-47664 1 Struktur 1 Libde265 2025-03-07 N/A 7.8 HIGH
Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
CVE-2023-20624 2 Google, Mediatek 16 Android, Mt6789, Mt6833 and 13 more 2025-03-06 N/A 6.7 MEDIUM
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628530; Issue ID: ALPS07628530.