The vulnerability of the get_line function in the read.c component of the Fig2dev file-formatting utility allows a attacker to cause a service failure.

The vulnerability of the getline function in the read.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability in the do_checksum function of the checksum.c component of the Pcap Tcpreplay editing and reproduction utility allows a hacker to cause a service failure.

The vulnerability of the dochecksum function in the checksum.c component of the Pcap Tcpreplay editing and reproduction utility involves copying buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created...

The vulnerability of the dwarf::line_table::line_table function in the ELF and DWARFv4 reading library of Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::linetable::linetable function in the ELF and DWARFv4 file reading library Libelfin is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500v2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2, NETGEAR R7100LG, and NETGEAR DC112A lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500Lv2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2,...

The vulnerability in the implementation of the st21nfca_connectivity_event_received() function in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability in the implementation of the st21nfcaconnectivityeventreceived function in Linux kernel systems relates to the copying of buffers without checking the size of the input data when processing length parameters. Exploiting this vulnerability can allow attackers to compromise the...

PT-2022-13028 · Netatalk +3 · Netatalk +3

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...

The vulnerability of Adobe Illustrator, a graphic editor, arises from copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-0982

The telnetinputchar function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdlinelen is copied into a fixed buffer b-buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger...

CVE-2021-40056

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability...

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Sonos One Speaker 缓冲区错误漏洞

Sonos One Speaker is a smart speaker by Sonos, Inc. Sonos One Speaker suffers from a buffer error vulnerability that stems from a lack of proper validation of the length of user-supplied data before copying it into a stack-based buffer. An attacker could use this vulnerability to execute code in...

CVE-2022-24313

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020...

CVE-2022-22725

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be...

The vulnerability of NETGEAR EX7000, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7900, R7900P, R8000, R8000P, RAX80, WNR3500v2 Wi-Fi routers lies in the copying of buffers without checking the size of input data. This allows attackers to compromise the integrity and confidentiality of protected information.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models EX7000, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7900, R7900P, R8000, R8000P, RAX80, and WNR3500v2, stems from the copying of buffers without checking the size of the input data...

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, RAX75 Wi-Fi router software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, and RAX75 Wi-Fi routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an intruder to gain...

PT-2023-1653 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17 Description: The issue is related to an error path in the dwc3 qcom acpi register core function in the Linux kernel, specifically in the drivers/usb/dwc3/dwc3-qcom.c file. This error path lacks certain...

CVE-2021-44423

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

Out-of-bounds

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

BlueZ 缓冲区错误漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in Bluetoothd in BlueZ version 5.48 and earlier, which stems from a program receiving data without any size checking, and which ca...