Vulnerabilities (CVE)

Filtered by CWE-120
Total 721 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30085 1 Libming 1 Libming 2025-01-29 N/A 5.5 MEDIUM
Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c.
CVE-2023-27956 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2025-01-29 N/A 5.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2023-27955 1 Apple 3 Ipados, Iphone Os, Macos 2025-01-29 N/A 5.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files.
CVE-2022-47487 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 5.5 MEDIUM
In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.
CVE-2022-47499 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47498 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47497 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47496 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47495 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47494 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47491 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-28 N/A 4.4 MEDIUM
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2023-30083 1 Libming 1 Libming 2025-01-28 N/A 5.5 MEDIUM
Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c.
CVE-2021-26354 1 Amd 304 Amd 3015ce, Amd 3015ce Firmware, Amd 3015e and 301 more 2025-01-28 N/A 5.5 MEDIUM
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity.
CVE-2024-0816 1 Zyxel 130 Ax7501-b0, Ax7501-b0 Firmware, Ax7501-b1 and 127 more 2025-01-22 N/A 5.5 MEDIUM
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
CVE-2023-37929 1 Zyxel 64 Ax7501-b0, Ax7501-b0 Firmware, Ax7501-b1 and 61 more 2025-01-22 N/A 6.5 MEDIUM
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
CVE-2024-9197 1 Zyxel 72 Ax7501-b0, Ax7501-b0 Firmware, Ax7501-b1 and 69 more 2025-01-21 N/A 4.9 MEDIUM
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
CVE-2022-24807 4 Debian, Fedoraproject, Net-snmp and 1 more 15 Debian Linux, Fedora, Net-snmp and 12 more 2025-01-17 N/A 6.5 MEDIUM
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVE-2022-24805 4 Debian, Fedoraproject, Net-snmp and 1 more 15 Debian Linux, Fedora, Net-snmp and 12 more 2025-01-17 N/A 6.5 MEDIUM
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVE-2024-48806 2025-01-16 N/A 6.8 MEDIUM
Buffer Overflow vulnerability in Neat Board NFC v.1.20240620.0015 allows a physically proximate attackers to escalate privileges via a crafted payload to the password field
CVE-2023-43526 1 Qualcomm 76 Ar8035, Ar8035 Firmware, Fastconnect 7800 and 73 more 2025-01-15 N/A 6.7 MEDIUM
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.