CVE-2025-12440: Buffer Copy without Checking Size of Input

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2025-48835

Уязвимость функции fromPptpUserSetting микропрограммного обеспечения маршрутизаторов Tenda CH22 связана с копированием буфера без проверки размера входных данных при обработке параметра delno. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на...

The vulnerability of the formAdvNetwork() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formAdvNetwork function in D-Link DIR600L router software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the formSetDomainFilter() function in D-Link DIR600L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetDomainFilter function in D-Link DIR600L router software lies in the copying of the buffer without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotel...

The vulnerability of the formDeviceReboot() function in D-Link DIR600L router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the formDeviceReboot function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the nextpage parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the formEasySetTimezone() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formEasySetTimezone function in D-Link DIR600L router microprogramming software is related to the copying of buffer data without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the formSetWizard1() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formSetWizard1 function in the D-Link DIR600L router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause a...

The vulnerability of the formAdvFirewall() function in D-Link DIR600L router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formAdvFirewall function in the microprogramming software for D-Link DIR600L routers is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to caus...

PT-2025-44273

Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox versions through 1.8.33 Description A buffer copy issue exists where the size of the input is not checked, potentially leading to a buffer overflow. This affects the ABB Terra AC wallbox. Recommendations Update to a versio...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the fromVirtualSer() function in the Tenda CH22 router’s microprogramming software allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromVirtualSer function in Tenda CH22 router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary code, gain...

The vulnerability of the fromNatStaticSetting() function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system allows a hacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromNatStaticSetting function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could all...

The vulnerability of the `pcibios_bus_to_resource` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pcibiosbustoresource function in Linux kernels is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the in_atomic() function in the driver module md/dm-bufio.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the inatomic function in the driver module md/dm-bufio.c of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the formLanSetupRouterSettings() function in D-Link DIR600L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formLanSetupRouterSettings function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability allows a remote attacker to...

CVE-2025-22833

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...

Vulnerability of the main() function in the src/xxd/xxd.c file of the text editor Vim, allowing a hacker to trigger a service failure.

The vulnerability in the main function of the src/xxd/xxd.c file in the Vim text editor is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-53474: Buffer Copy without Checking Size of Input

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-22833

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...

EUVD-2025-34216

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...