CVE-2022-33224 Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

CVE-2022-33224

CVE-2022-33224 describes memory corruption in a Qualcomm core component caused by a buffer copy that does not check input size when processing ioctl queries. Connected sources identify the vulnerability as affecting a Qualcomm closed-source component and corroborate the issue as core memory corru...

CVE-2022-33226: Buffer Copy without Checking Size of Input

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications...

CVE-2022-33230: Buffer Copy without Checking Size of Input

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host...

PT-2023-13248 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in Core when processing ioctl commands from diag client applications. Recommendations: At t...

CVE-2022-33224: Buffer Copy without Checking Size of Input

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

PT-2023-13251 · Fm Host · Fm Host

Name of the Vulnerable Software and Affected Versions: FM Host affected versions not specified Description: The issue is related to memory corruption in FM Host due to a buffer copy operation without checking the size of the input. This can lead to potential security risks. Recommendations: At th...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from a buffer copy without checking the input size in the FM host, a memory corruption in the FM host, and a failure to check the input size in the FM host...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogrammed network devices such as Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of the identifier processing function in Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the identifier processing function in Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG network devices lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause...

CVE-2023-2597: Buffer Copy without Checking Size of Input

In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache which is enabled by default in OpenJ9 builds the size of a string is not properly checked against the size of the buffer...

CVE-2023-20158: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

CVE-2023-20160: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

CVE-2023-20162: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

CVE-2023-20161: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

CVE-2023-20159: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

CVE-2023-20156: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...

The vulnerability of the set_sixel function in the graphics_sixel.c component of the XTerm terminal emulator allows a hacker to cause a system failure.

The vulnerability of the setsixel function in the graphicssixel.c component of the XTerm terminal emulator involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the jfif_encode() function in the FFJPEG library for encoding and decoding JPEG files allows a attacker to cause a service failure.

The vulnerability of the jfifencode function ffjpeg/src/jfif.c in the library for encoding and decoding JPEG files allows for the copying of buffers without checking the size of the input data. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...

CVE-2021-26354: Buffer Copy without Checking Size of Input

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity...