Vulnerabilities (CVE)

Filtered by CWE-120
Total 2995 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32230 1 Ffmpeg 1 Ffmpeg 2025-03-14 N/A 7.8 HIGH
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0
CVE-2024-24417 1 Linuxfoundation 1 Magma 2025-03-14 N/A 7.5 HIGH
The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2024-46584 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-14 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-46560 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-14 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-35422 2025-03-14 N/A 7.8 HIGH
vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c.
CVE-2018-9387 2025-03-14 N/A 7.8 HIGH
In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-46580 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-14 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-53589 2025-03-14 N/A 8.4 HIGH
GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.
CVE-2023-46012 2025-03-14 N/A 9.8 CRITICAL
Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP.
CVE-2024-30635 1 Tenda 2 F1202, F1202 Firmware 2025-03-13 N/A 9.8 CRITICAL
Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.
CVE-2024-46588 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-46554 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-46551 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-27878 1 Apple 1 Macos 2025-03-13 N/A 6.7 MEDIUM
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2024-30602 1 Tenda 2 Fh1203, Fh1203 Firmware 2025-03-13 N/A 9.8 CRITICAL
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
CVE-2024-46595 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2023-52365 1 Huawei 2 Emui, Harmonyos 2025-03-13 N/A 5.3 MEDIUM
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-46557 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-13 N/A 7.5 HIGH
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-37632 1 Totolink 2 A3700r, A3700r Firmware 2025-03-13 N/A 9.8 CRITICAL
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
CVE-2024-30584 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 N/A 9.8 CRITICAL
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.