Lucene search
K

7 matches found

OSV
OSV
added 2026/02/26 6:23 p.m.4 views

CVE-2026-23747

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The goliothpayloadasint and goliothpayloadasfloat helpers copy network-supplied payload data into fixed-size stack buffers using memcpy with a length derived from...

6.3CVSS6.2AI score
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 11:47 p.m.4 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS7AI score0.00041EPSS
Exploits0References1
CVE
CVE
added 2025/04/05 12:0 a.m.74 views

CVE-2025-32366

In ConnMan up to version 1.44, the DNS proxy code path parse_rr in dnsproxy.c uses a memcpy length derived from an RR RDLENGTH (rdlen) value without validating that end+rdlen stays within the remaining packet data. Specifically, rdlen is computed as ntohs(rr->rdlen) and memcpy(response+offset,...

4.8CVSS4.6AI score0.00194EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.3 views

CVE-2022-0562

Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...

5.5CVSS6.2AI score0.00035EPSS
Exploits1References10Affected Software1
CNVD
CNVD
added 2020/04/08 12:0 a.m.1 views

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-31531)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in the 'memcpy' function of the OTP service in Samsung mobile devices powered by the Exynos AP chipset, which stems from a failure to perform...

9.8CVSS7.8AI score0.00159EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2018/01/12 12:0 a.m.0 views

VulnCheck KEV: CVE-2018-8872

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory...

9.3CVSS7.2AI score0.00759EPSS
Exploits0References1
FreeBSD Advisory
FreeBSD Advisory
added 2003/03/20 12:0 a.m.3 views

FreeBSD-SA-03:05.xdr

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:05.xdr Security Advisory The FreeBSD Project Topic: remote denial-of-service in XDR encoder/decoder Category: core Module: libc Announced: 2003-03-20 Credits:...

5.8AI score
Exploits0
Rows per page
Query Builder