1442 matches found
CVE-2026-39869: Buffer Copy without Checking Size of Input
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing an audio stream in a maliciously crafted media file...
The vulnerability of the SafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the SafeEmailFilter function /goform/SafeEmailFilter of the Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...
The vulnerability of the k12_dump_src_setting() function in the K12 file parser and RF5 traffic analyzer software from Wireshark allows a hacker to cause service interruptions.
The vulnerability of the k12dumpsrcsetting function in the K12 file parser and the RF5 traffic analyzer of Wireshark allows for buffer copying without checking input data. Exploiting this vulnerability can enable a hacker to cause service failures...
CVE-2025-47404 Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...
CVE-2025-47404
CVE-2025-47404 describes memory corruption that occurs when dynamically changing the size of a previously allocated buffer while its contents are being modified. The NVD entry lists a Local attack vector with Low exploit complexity and Low privileges, resulting in High impact to confidentiality, ...
CVE-2025-47404 Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...
CVE-2025-47404: Buffer Copy without Checking Size of Input
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...
CVE-2026-5404: Buffer Copy without Checking Size of Input
K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
The vulnerability of the `sysfb_disable()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the sysfbdisable function in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-7321: Buffer Copy without Checking Size of Input
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, and Firefox ESR 140.10.1...
The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...
The vulnerability of the frmL7ProtForm() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the frmL7ProtForm function in the Tenda F456 router’s microprogramming software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...
The vulnerability of the libpng library, related to copying buffers without checking the size of the input data, allows a hacker to cause a service failure.
The vulnerability of the libpng library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request to the /tggl.asp endpoint...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the routes parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router’s microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted GET request...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the name parameter. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by sending a...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters name, qq, and time. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a...
The vulnerability of the formGroupConfig() function in the UTT HiPER 810G router software allows a hacker to cause a service failure.
The vulnerability of the formGroupConfig function in the UTT HiPER 810G router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260408-73-0018
A vulnerability in the usbparsessendpointcompanion function of the drivers/usb/core/config.c component of the Linux kernel is related to buffer copying without input data validation. Exploitation of the vulnerability allows an intruder to affect confidentiality and availability of protected...