Vulnerabilities (CVE)

Filtered by CWE-120
Total 3990 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-58108 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.6 MEDIUM
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-58107 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.5 HIGH
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-58106 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.6 MEDIUM
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-57703 1 Tenda 2 Ac8, Ac8 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTime leads to stack-based buffer overflow.
CVE-2024-57578 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function.
CVE-2024-57577 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 N/A 5.7 MEDIUM
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2024-57545 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 5.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification.
CVE-2024-57544 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 5.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification.
CVE-2024-57543 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 5.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification.
CVE-2024-57541 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 5.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification.
CVE-2024-57540 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 6.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification.
CVE-2024-57538 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 6.5 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification.
CVE-2024-57537 1 Linksys 2 E8450, E8450 Firmware 2026-06-17 N/A 6.3 MEDIUM
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification.
CVE-2024-57513 2026-06-17 N/A 6.5 MEDIUM
A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.
CVE-2024-57510 2026-06-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial.
CVE-2024-57509 2026-06-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions.
CVE-2024-57483 1 Tenda 2 I24, I24 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
CVE-2024-57482 1 H3c 2 N12, N12 Firmware 2026-06-17 N/A 9.8 CRITICAL
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.
CVE-2024-57480 1 H3c 2 N12, N12 Firmware 2026-06-17 N/A 9.8 CRITICAL
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.
CVE-2024-57479 1 H3c 2 N12, N12 Firmware 2026-06-17 N/A 9.8 CRITICAL
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.