A vulnerability exists in the acdb25.dll file of the AutoCAD simulation, design, and drafting software, which allows a perpetrator to execute arbitrary code.

The vulnerability in the acdb25.dll file of the AutoCAD modeling, design, and drawing software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process while...

The vulnerability of the Windows Mobile broadband access driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile broadband access driver in Windows operating systems is related to the lack of control over the size of the requested buffer. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

The vulnerability of the cgi_del_photo() function (/cgi-bin/photocenter_mgr.cgi) in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows a hacker to execute arbitrary commands.

The vulnerability of the cgidelphoto function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4,...

CVE-2024-22170 Unchecked buffer in Dynamic DNS client

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My Cloud: before 5.29.102...

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers allows a perpetrator to execute arbitrary code.

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the ReadClause() function in the Espeak speech synthesiser allows a perpetrator to trigger a service failure.

The vulnerability of the ReadClause function in the Espeak speech synthesiser lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

The vulnerability of the log_blackbox.c component in the libqb library allows a hacker to execute arbitrary code.

The vulnerability of the logblackbox.c component in the libqb library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-41292

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

The vulnerability of the cgi-bin/login.asp file in the ZyXEL PMG2005-T20C router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the cgi-bin/login.asp file in the ZyXEL PMG2005-T20C router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the wifiRadioSetIndoor function in the Tenda i29 wireless access point’s microprogramming software allows a intruder to execute arbitrary code.

The vulnerability of the wifiRadioSetIndoor function in the Tenda i29 wireless access point software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of ArubaOS systems allows a hacker to trigger a service failure.

The vulnerability in the web interface of ArubaOS relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

PT-2023-13800 · Qualcomm · Snapdragon +183

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to a buffer copy without checking the size of the input in Audio while a voice call is made...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogrammed network devices such as Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

PT-2023-13270 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input in a modem. This occurs while decoding raw...

The vulnerability of the Emscripten compiler in the encoding and decoding library for HEIF and AVIF files, which allows a hacker to trigger a service failure.

The vulnerability of the Emscripten compiler in the library for encoding and decoding HEIF and AVIF files is related to the copying of buffers without checking the size of the input data during image processing using the strided function. Exploiting this vulnerability can allow an attacker to cau...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from memory...

PT-2023-13253 · Qualcomm · Snapdragon +99

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input. This occurs while running memory sharing tests...

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software lies in the copying of a buffer without checking the size of the input data during the processing of the HNAPAUTH header. Exploiting this vulnerability allows an...

The vulnerability of the tftpd_file.c component of the client TFTP Atftp, related to copying buffers without checking input data, allows a perpetrator to cause a service failure.

The vulnerability of the tftpdfile.c component in the client TFTP/Atftp system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...