CVE-2026-78221

A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...

CVE-2026-14355

The CVE-2026-14355 issue affects PHP 8.2.x before 8.2.32, 8.3.x before 8.3.32, 8.4.x before 8.4.23, and 8.5.x before 8.5.8. It is caused by a buffer allocation flaw in the AES-WRAP-PAD algorithm within the OpenSSL extension, where the output buffer for AES key-wrap-with-padding is sized from plai...

EUVD-2026-36151

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash denial of service...

i40e Linux Data Compromise

The vulnerability of the i40e components of the Linux operating system’s kernel is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Linux sound device USB Audio Buffer Overflow

The vulnerability of the sndusbendpointsetparams function in the sound/usb/endpoint.c module, which is part of Linux’s sound device support for USB devices, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Incorrect Calculation of Buffer Size

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Cisco Adaptive Security Appliance Code Execution

The vulnerability of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming firewalls lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root...

Dahua video surveillance cameras Buffer Overflow

The vulnerability of Dahua video surveillance cameras lies in the copying of input data into the buffer without checking its size. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure...

PDF-XChange Editor Buffer Overflow

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the copying of buffers without checking the size of the input data when processing GIF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

boafrm/formWirelessTbl HTTP POST Request Handler Router Data Compromise

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWirelessTbl file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

CVE-2021-22392

There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses...

SIMATIC PCS Buffer Overflow

The vulnerability of SIMATIC PCS, SIMATIC WinCC Runtime Professional, and SIMATIC WinCC control systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the system’s operations...

NVIDIA Virtual GPU Manager Privilege Escalation

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code, increase their privileges, or disclose sensitive information...

Kofax PowerPDF Buffer Overflow RCE

The vulnerability of the Kofax PowerPDF software for creating, converting, editing, and publishing PDF files lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted PDF fi...

Linux UBI Driver create_empty_lvol() Heap Buffer Overflow DoS

The vulnerability of the createemptylvol function in the drivers/mtd/ubi/vtbl.c file of the UBI driver Unsorted block images in the Linux operating system is related to the lack of control over the size of the requested buffer. Exploiting this vulnerability could allow an attacker to cause a...

GNU C Library Heap Buffer Overflow

The vulnerability of the vsysloginternal function in the GNU C Library is related to incorrect calculation of the buffer size. Exploiting this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Delta Electronics WPLSoft Buffer Overflow

The vulnerability of Delta Electronics WPLSoft PLC programming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created DVP file...

CVE-2023-45040

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

HP LaserJet Pro Buffer Overflow

The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

iTop IT Service Management Code Execution

The vulnerability of the export-v2.php and ajax.render.php components of the iTop IT service management web tool is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...