The vulnerability of the /goform/setWifi microprogramming software for Tenda F3 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the /goform/setWifi microprogramming system for Tenda F3 wireless routers lies in the copying of buffers without checking the size of the input data during the processing of the wifiTimeClose parameter. Exploiting this vulnerability allows an attacker to execute arbitrary cod...

ABB Cylon Aspect BMS/BAS

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to assume control of the target device or perform a denial-of-service DoS attack. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda CH22 router software allows a attacker to cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda CH22 router’s microprogramming system lies in the copying of buffers without checking the size of the input data when processing the cmdinput parameter. Exploiting this vulnerability could allow a remote attacker to...

CVE-2025-9961: Buffer Copy without Checking Size of Input

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle MITM attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6:...

CVE-2025-32100

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via...

CVE-2025-32100

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via...

CVE-2025-32100

A programming mistake regarding buffer copy in Samsung Mobile Processor , Wearable Processor , and Modem components (specifically Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, and Modems 5123, 5300, 5400) leads to out-of-bounds writes . This ...

CVE-2025-32100

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via...

CVE-2025-32100

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via...

SAMSUNG Mobile Processor 安全漏洞

SAMSUNG Mobile Processor is a family of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor that originates from a buffer copy programming error that results in an out-of-bounds write...

PT-2025-35595

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980 Samsung Mobile Processor, Wearable Processor, and Modem Exynos 990 Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850 Samsung Mobile Processor, Wearable...

The vulnerability of the size_limit_mb function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the sizelimitmb function in Linux operating systems is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the do_convert_to_ump() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the doconverttoump function in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-54568: Buffer Copy without Checking Size of Input

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...

The vulnerability of the Eichrecht() function in microprogrammed software-based modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 models allows a intruder to influence the integrity and accessibility of protected information.

The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...

The vulnerability of the Totolink A3002R router’s microprogramming software, related to copying buffers without checking the size of input data, allows for a failure in serviceability.

The vulnerability of the Totolink A3002R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the sub_54340() function in Netgear EX6200 router microprogramming software allows a hacker to disclose protected information.

The vulnerability of the sub54340 function in Netgear EX6200 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the handlingError() function in the GoBGP edge router protocol, which allows a attacker to cause a service failure

The vulnerability of the handlingError function in the GoBGP edge gateway protocol is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-38538

In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe The nbpf-chan array is allocated earlier in the nbpfprobe function and it has "numchannels" elements. These three loops iterate one element farther than they should and corrupt...

CVE-2025-7677: Buffer Copy without Checking Size of Input

A denial-of-service DoS attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT...