Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37044)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37041)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2025-36917: Buffer Copy without Checking Size of Input

In SwDcpItg of upL2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-14310

CVE-2025-14310 describes a classic buffer overflow in rethinkdb caused by a buffer copy without checking input size, affecting rethinkdb before 2.4.4. According to connected sources, the flaw can enable arbitrary code execution or denial of service, with high impact to confidentiality, integrity,...

The vulnerability of the Synology BeeStation OS operating system, related to copying buffers without checking the size of the input data, allows a hacker to execute arbitrary code.

The vulnerability of the Synology BeeStation OS operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the `fs/smb/client/smb2ops.c` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fs/smb/client/smb2ops.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `usb_parse_ss_endpoint_companion()` function in the drivers/usb/core/config.c file of the Linux kernel allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the usbparsessendpointcompanion function in the drivers/usb/core/config.c file of the Linux kernel lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of the...

The vulnerability of the blk_stack_limits() function in the block/blk-settings.c component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the blkstacklimits function in the block/blk-settings.c component of the Linux kernel’s firmware is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the jbd2_log_do_checkpoint() function in the fs/jbd2/checkpoint.c component of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the jbd2logdocheckpoint function in the fs/jbd2/checkpoint.c component of the Linux kernel involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the setup_clusters() function in the mm/swapfile.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the setupclusters function in the mm/swapfile.c component of the Linux kernel involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows attackers to compromise the integrity of protected information.

The vulnerability of the btrfs component in Linux operating systems relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

CVE-2025-66287: Buffer Copy without Checking Size of Input

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

The vulnerability of the hwmon component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the hwmon component in the Linux operating system’s kernel involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

Vulnerability of the __xe_bb_create_job() function in the drivers/gpu/drm/xe/xe_bb.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xebbcreatejob function in the drivers/gpu/drm/xe/xebb.c module – The DRI driver for Linux’s direct rendering infrastructure is vulnerable due to a buffer copy operation without input data validation. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2025-9558: Buffer Copy without Checking Size of Input

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

CVE-2025-65102: Buffer Copy without Checking Size of Input

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

The vulnerability of the sub_420F04() function in D-Link router microprogramming devices such as DWR-M920, DWR-M921, DWR-M960, DWR-M961, and DIR-825M allows a hacker to execute arbitrary code.

The vulnerability of the sub420F04 function in D-Link router microprogramming systems such as DWR-M920, DWR-M921, DWR-M960, DWR-M961, and DIR-825M lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2025-47353

Name of the Vulnerable Software and Affected Versions Fortinet FortiExtender versions 7.0 all versions Fortinet FortiExtender versions 7.2 all versions Fortinet FortiExtender versions 7.4.0 through 7.4.6 Fortinet FortiExtender versions 7.6.0 through 7.6.1 Description A buffer copy issue without...

The vulnerability of the formSetMACFilter() function in D-Link DIR600L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetMACFilter function in D-Link DIR600L router microprogramming software is related to the copying of buffer data without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicious actor to...

ROS-20251111-10

Vulnerability of processsymtab function of eu-readelf component of ELF Elfutils binary modification and analysis utility is related to copying buffer without checking input data size. ELF Elfutils is related to buffer copying without checking input data size. Exploitation vulnerability could allo...