Vulnerabilities (CVE)

Filtered by CWE-120
Total 3990 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25529 2026-06-17 N/A 5.1 MEDIUM
Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2025-25528 1 Wavlink 2 Wl-wn575a3, Wl-wn575a3 Firmware 2026-06-17 N/A 5.1 MEDIUM
Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any authorization verification.
CVE-2025-25527 1 Ruijie 2 Rg-nbr2600s, Rg-nbr2600s Firmware 2026-06-17 N/A 5.1 MEDIUM
Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2025-25526 2026-06-17 N/A 5.1 MEDIUM
Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2025-25525 2026-06-17 N/A 5.1 MEDIUM
Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2025-25524 1 Totolink 2 X6000r, X6000r Firmware 2026-06-17 N/A 5.1 MEDIUM
Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2025-25523 1 Trendnet 2 Teg-40128, Teg-40128 Firmware 2026-06-17 N/A 5.9 MEDIUM
Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.
CVE-2025-25522 1 Linksys 2 Wap610n, Wap610n Firmware 2026-06-17 N/A 7.3 HIGH
Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.
CVE-2025-25510 1 Tenda 2 Ac8, Ac8 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.
CVE-2025-25505 1 Tenda 2 Ac6, Ac6 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.
CVE-2025-25474 2 Debian, Offis 2 Debian Linux, Dcmtk 2026-06-17 N/A 6.5 MEDIUM
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
CVE-2025-25472 2 Debian, Offis 2 Debian Linux, Dcmtk 2026-06-17 N/A 5.3 MEDIUM
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
CVE-2025-25458 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 4.6 MEDIUM
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2.
CVE-2025-25456 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.
CVE-2025-25453 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 4.6 MEDIUM
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2.
CVE-2025-25343 1 Tenda 2 Ac6, Ac6 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
CVE-2025-25280 2026-06-17 N/A 5.3 MEDIUM
Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.
CVE-2025-25052 1 Openatom 1 Openharmony 2026-06-17 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.
CVE-2025-24956 1 Siemens 1 Openv2g 2026-06-17 N/A 6.2 MEDIUM
A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.
CVE-2025-24519 1 Intel 1 Quickassist Technology 2026-06-17 N/A 6.5 MEDIUM
Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.