CVE-2025-47388 Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47388

CVE-2025-47388 : Qualcomm chipsets memory corruption occurs when passing pages to the DSP with an unaligned starting address, as described in multiple feeds. The vulnerability affects the DSP service path and could enable a local attacker to corrupt memory, with high impact on confidentiality, in...

CVE-2025-47335 Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while parsing clock configuration data for a specific hardware type...

CVE-2025-47335

CVE-2025-47335 corresponds to a memory corruption vulnerability in Qualcomm chipsets triggered while parsing clock configuration data for a specific hardware type. The issue is described across multiple feeds (NVD/Red Hat/CNNVD/etc.) as memory corruption during clock config parsing, with CVSSv3.1...

EUVD-2025-204962

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

CVE-2022-50687: Buffer Copy without Checking Size of Input

Cobian Backup 11 Gravity 11.2.0.582 contains a denial of service vulnerability in the FTP password input field that allows attackers to crash the application. Attackers can generate a specially crafted 800-byte buffer and paste it into the password field to trigger an application crash...

The vulnerability of the resolveSubtable function in the text conversion library for Braille text allows a hacker to trigger a service failure.

The vulnerability of the resolveSubtable function in the text-to-Braille conversion library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions using a specially...

CVE-2025-47372 Buffer Copy Without Checking Size of Input in Boot

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication...

CVE-2025-47321

CVE-2025-47321 concerns a memory corruption issue in Qualcomm embedded platform firmware when handling packets from Unix clients. Root cause: inadequate validation of incoming data size during buffer copying, allowing potential arbitrary code execution. Impact: potential local code execution on a...

CVE-2025-47321 Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients...

CVE-2025-47321: Buffer Copy without Checking Size of Input

Memory corruption while copying packets received from unix clients...

CVE-2025-47372: Buffer Copy without Checking Size of Input

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication...

The vulnerability of the `add_tuning_control` function in the `sound/pci/hda/patch_ca0132.c` component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the addtuningcontrol function in the sound/pci/hda/patchca0132.c kernel module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37044)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37041)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2025-36917: Buffer Copy without Checking Size of Input

In SwDcpItg of upL2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-14310

CVE-2025-14310 describes a classic buffer overflow in rethinkdb caused by a buffer copy without checking input size, affecting rethinkdb before 2.4.4. According to connected sources, the flaw can enable arbitrary code execution or denial of service, with high impact to confidentiality, integrity,...

The vulnerability of the Synology BeeStation OS operating system, related to copying buffers without checking the size of the input data, allows a hacker to execute arbitrary code.

The vulnerability of the Synology BeeStation OS operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the blk_stack_limits() function in the block/blk-settings.c component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the blkstacklimits function in the block/blk-settings.c component of the Linux kernel’s firmware is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the `fs/smb/client/smb2ops.c` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fs/smb/client/smb2ops.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...