Memory corruption

A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust...

The vulnerability of the FixMapCfgRpm component (/userRpm/FixMapCfgRpm.htm) in the microprogramming software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR740N allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N lies in the copying of buffers without checking the size of the input data during the processing of the Changed parameter. Exploiting this vulnerability can allow a...

PT-2023-13246 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in the core due to a buffer copy without checking the size of the input while processing ioctl queries...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a core memory corruption due to a buffer copy that does not check the input size when processing ioctl queries...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

Memory corruption

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information...

The vulnerability of the imageinfo.hpp file in the imageinfo library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imageinfo.hpp file in the imageinfo library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ff_hevc_put_hevc_qpel_pixels_8_sse function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in ArubaOS lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2022-40540

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel...

PT-2023-9309 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev35-gbbca86917-master Description: A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow...

The vulnerability of Mozilla Firefox ESR and the Mozilla Thunderbird email client lies in the fact that they allow copying into the buffer without checking the size of the input data. This allows attackers to execute arbitrary code on the target system.

The vulnerability in Mozilla Firefox ESR and the Mozilla Thunderbird email client relates to the copying of input data into the buffer without checking its size. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

PT-2023-13283 · Qualcomm · Snapdragon +110

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to a buffer copy without checking the size of the input in HLOS. This occurs when the input message size...

The vulnerability of AMD microprocessor BIOS microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system of AMD processors lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

SUSE CVE-2015-9542

addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy. An attacker could send a crafted password to an application loading the pamradius library and crash it. Arbitrary code...

SUSE CVE-2022-4904

A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...

CVE-2023-0397

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...

CVE-2023-0397 DoS: Invalid Initialization in le_read_buffer_size_complete

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...

CVE-2023-22409

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

Race condition

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...