CVE-2026-41907

A flaw was found in uuid. The library's versions v3, v5, and v6 do not adequately check the size of external memory buffers provided by applications. This oversight allows the library to write data beyond the designated buffer limits without signaling an error. Such out-of-bounds writes can lead ...

The vulnerability of the microchip-core component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the microchip-core component of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the formDnsv6 function in the Totolink A3002R router’s software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDnsv6 function in the Totolink A3002R router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability in the implementation of the SMB protocol in the Mac OS allows a perpetrator to increase their privileges and execute arbitrary code.

The vulnerability of the SMB protocol implementation in the Mac OS is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the uh_tcp_recv_header() function in the HTTP-server of the microprogramming-based Wi-Fi extension devices from Actiontec, WCB6200Q, allows a hacker to execute arbitrary code.

The vulnerability of the uhtcprecvheader function in the HTTP-server of the microprogrammed Wi-Fi extension software from Actiontec WCB6200Q involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 allows a perpetrator to trigger a restart of the NFC service.

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

The vulnerability of the microprogramming software of Zyxel NBG-418N switches lies in the copying of buffers without checking the size of the input data, allowing a hacker to trigger a service failure.

The vulnerability of the microprogramming software of Zyxel NBG6604 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the devredir_proc_client_devlist_announce_req() function on the XRDP server allows a hacker to execute arbitrary code.

The vulnerability of the devredirprocclientdevlistannouncereq function on the XRDP server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the __Parse_indx component in the VLC Media Player allows a attacker to access confidential data and also cause a service failure.

The vulnerability of the Parseindx component in the VLC Media Player lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a specially created .avi file...

The vulnerability of the vlc_input_attachment_New component in the VLC Media Player software allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the vlcinputattachmentNew component in the VLC Media Player software is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a speciall...

The vulnerability of the GOOSE (Generic Object-Oriented Substation Event) protocol implementation in Schneider Electric Easergy P3 micro-programmed devices for relay protection and control allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the GOOSE Generic Object-Oriented Substation Event protocol implementation in Schneider Electric Easergy P3 microprogrammable devices for relay protection and control systems lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability...

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary codes remotely...

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900 lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of NETGEAR Wi-Fi router software models such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900P lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of Cisco Small Business LLDP switches, related to copying buffers without checking input data, allows a perpetrator to execute arbitrary code.

The vulnerability of Cisco Small Business LLDP switches lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of NETGEAR Wi-Fi router microprogramming software, models AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, arises from the copying of buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of NETGEAR Wi-Fi router software models AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability allows a...

The vulnerability of the microprogramming software of the Intel Modular Server MFS2600KI arises from copying buffers without checking the size of the input data. This allows attackers to exploit this vulnerability to increase their privileges.

The vulnerability of the Microprogramming Software of the Intel Modular Server MFS2600KI is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, arises from copying buffers without checking the size of the input data. This allows a malicious actor to cause a service failure.

The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2018-20340

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is...

CREAR ALMail32 1.10 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/574/info The ALMail32 POP3 client conatins unchecked buffers in the header parsing code. An abnormally long FROM: or TO: field in the header of an incoming email will overwrite the buffer and allow arbitrary code to be...

Security Bulletin MS02-020:SQL Extended Procedure Functions Contain Unchecked Buffers (Q319507)

---------------------------------------------------------------------- Title: SQL Extended Procedure Functions Contain Unchecked Buffers Q319507 Date: 17 April 2002 Software: Microsoft SQL Server Impact: Run Code of Attacker's Choice Max Risk: Moderate Bulletin: MS02-020 Microsoft encourages...