943 matches found
Stack overflow
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe...
Stack overflow
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affected Products: IGSS Data Server -...
CVE-2022-32524
CVE-2022-32524 affects Schneider Electric IGSS Data Server (IGSSdataServer.exe) prior to version 15.0.0.22170. The root cause is a CWE-120: Buffer Copy without Checking Size of Input, leading to a stack-based buffer overflow. This could enable remote code execution when an attacker sends speciall...
CVE-2022-32526
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Data Server - IGSSdataServer.exe Version...
Siemens SCALANCE X-300 Switches Buffer Copy Without Checking Size of Input (CVE-2022-26334)
A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...
Siemens SCALANCE X-300 Switches Buffer Copy Without Checking Size of Input (CVE-2022-26335)
A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...
CVE-2022-33276
Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command...
Memory corruption
Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command...
CVE-2022-33276
The CVE-2022-33276 issue is linked to Qualcomm’s embedded platform modem, where a buffer copy in the WMI_REQUEST_STATS_CMDID handling allows memory corruption. The PT-2023-1410 entry explicitly notes a buffer overflow due to unchecked input size in the modem, potentially enabling arbitrary code e...
CVE-2022-33276 Buffer copy without checking size of input in Modem
Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command...
CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...
CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...
CVE-2022-25712
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-25712
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-25712
CVE-2022-25712 is a memory corruption issue in the Qualcomm camera stack triggered by a buffer copy that does not validate input size across Snapdragon Auto/Compute/Consumer IOT/Mobile/Wearables. Reported impact includes high confidentiality, integrity, and availability in CVSS analyses with a lo...
PT-2022-6528 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a buffer copy without checking the size of input, which can lead to memory corruption. This can occur while loading firmware in the Linux Kernel. The exploitati...
The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a attacker to execute arbitrary code.
The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software lies in the copying of a buffer without checking the size of the input data during the processing of the HNAPAUTH header. Exploiting this vulnerability allows an...
PT-2022-5483 · Unknown · Vport P06-1Mp-M12 +1
Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a buffer copy without checking the size of the input...
The vulnerability of the PAPI network protocol implementation in the Wi-Fi Aruba Instant wireless connectivity deployment application allows a attacker to execute arbitrary code.
The vulnerability of the PAPI protocol implementation for Wi-Fi Aruba Instant wireless connectivity applications lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafte...