CVE-2026-24080 Buffer Copy Without Checking Size of Input in Biometrics

Memory Corruption when handling malformed request parameters in the fingerprint TA...

The vulnerability of the me4000_xilinx_download() function in the drivers/comedi/drivers/me4000.c module, which supports devices for collecting data from Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the me4000xilinxdownload function in the drivers/comedi/drivers/me4000.c module, which supports devices for Linux operating system data collection, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting th...

ROS-20260729-73-0015

The vulnerability in libheif relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...

The vulnerability of the `dc_state_destruct()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcstatedestruct function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program allows a hacker to trigger a service failure.

The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...

ROS-20260609-73-0016

The vulnerability in Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

CVE-2026-25277 Buffer Copy Without Checking Size of Input in Secure Processor

Memory corruption while using Strongbox due to buffer overflow...

The vulnerability of the setAppEasyWizardConfig() function in the TOTOLink A800R router’s microprogramming software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the zstream_buffer_ungets() function in the zlib library, which allows an attacker to trigger a memory corruption.

The vulnerability of the zstreambufferungets function in the zlib library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause memory corruption remotely...

The vulnerability of the dump_zones() function in the drivers/md/raid0.c file of the Linux kernel driver for multiple device drivers (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dumpzones function in the drivers/md/raid0.c file of the Linux kernel-based device driver for multiple devices RAID and LVM is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability cou...

The vulnerability of the ext4_da_write_end() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary cod...

The vulnerability of the btrfs_truncate_block() function in the fs/btrfs/inode.c file of the file system module in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfstruncateblock function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the __skb_pull() function in the include/linux/skbuff.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the skbpull function in the include/linux/skbuff.h module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the svc_rdma_build_writes() function in the net/sunrpc/xprtrdma/svc_rdma_rw.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the svcrdmabuildwrites function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the smsc75xx_rx_fixup() function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver allows a hacker to cause a service failure.

The vulnerability of the smsc75xxrxfixup function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the `ice_get_module_eeprom()` function in the `drivers/net/ethernet/intel/ice/ice_ethtool.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the icegetmoduleeeprom function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...

The vulnerability of the f2fs_handle_failed inode() function in the fs/f2fs/inode.c file of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fshandlefailed inode function in the fs/f2fs/inode.c file of the F2FS file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a...

The vulnerability in the nvidia_setup_i2c_bus() function of the drivers/video/fbdev/nvidia/nv_i2c.c driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information within the Linux operating system’s kernel video buffer device.

The vulnerability of the nvidiasetupi2cbus function in the drivers/video/fbdev/nvidia/nvi2c.c driver module relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...