CVE-2025-25505

CVE-2025-25505 describes a buffer overflow in the Tenda AC6 firmware 15.03.05.16_multi, caused by a boundary error in the sub_452A4 function when processing untrusted input. Several sources confirm the affected product and function, with CVSSv3.1 metrics indicating network,

CVE-2025-25678

CVE-2025-25678 affects the Tenda i12, version 1.0.0.10(3805). It describes a buffer overflow in the formSetCfm function triggered via the funcpara1 parameter, which could be exploited by a remote attacker to crash the application and cause a denial of service. Public sources corroborate a vulnera...

CVE-2025-25663

A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow...

Tenda A18 Buffer Overflow Vulnerability

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 15.13.07.09 and earlier versions, which stems from the parameter wpapskcrypto5g failing to correctly validate the length and size of the input data, and can be exploited by an...

CVE-2023-34095

cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends CPDB project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via improper use of scanf3. cpdb-libs uses the fscanf and scanf functions to parse command lines and configuration...

CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

PT-2025-28687 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a buffer overflow issue within its DWG File Parser component. Exploitation of this issue could allow an attacker to execute arbitrar...

PT-2025-6334 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can allow the...

CVE-2025-25525

CVE-2025-25525 affects H3C FA3010L access points, SWFA1B0V100R005. The root cause is a buffer overflow due to lack of length verification in the firewall rules setting, enabling a local attacker to crash the remote device or execute arbitrary commands. Product is specifically the FA3010L family w...

PT-2025-28667 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage plugin contains a buffer overflow issue in memory when handling DXF files. Successful exploitation of this issue could allow an attacker to execute...

CVE-2024-46431

Tenda W18E V16.01.0.81625 is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45235)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45235 advisory. - EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID...

CVE-2025-23236

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...

CVE-2017-16332

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2019-17146

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

CVE-2025-0725 gzip integer overflow

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPTACCEPTENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow...

PT-2025-7047

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6 Description The issue is a stack-based buffer overflow in the xmlSnprintfElements function in valid.c. To exploit this, DTD validation must occur for an untrusted document o...

MGASA-2025-0026 Updated glibc packages fix security vulnerability

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. CVE-2025-0395...

CVE-2024-50695

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks...

CVE-2024-50697

SunGrow WiNet-SV200.001.00.P027 and earlier versions have a bounds-check vulnerability in the MQTT TLV parsing code that can cause a stack-based buffer overflow when decrypting MQTT messages. This could potentially enable remote code execution or cause a crash, as described across multiple source...