Vulnerabilities (CVE)

Filtered by CWE-120
Total 3793 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-50611 1 Netis-systems 2 Wf2880, Wf2880 Firmware 2025-08-15 N/A 7.5 HIGH
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVE-2025-50608 1 Netis-systems 2 Wf2880, Wf2880 Firmware 2025-08-15 N/A 7.5 HIGH
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVE-2025-50609 1 Netis-systems 2 Wf2880, Wf2880 Firmware 2025-08-15 N/A 7.5 HIGH
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVE-2025-50610 1 Netis-systems 2 Wf2880, Wf2880 Firmware 2025-08-15 N/A 7.5 HIGH
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVE-2025-50614 1 Netis-systems 2 Wf2880, Wf2880 Firmware 2025-08-14 N/A 7.5 HIGH
A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVE-2025-51823 1 Libcsp 1 Libcsp 2025-08-14 N/A 6.5 MEDIUM
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length.
CVE-2025-51824 1 Libcsp 1 Libcsp 2025-08-14 N/A 6.5 MEDIUM
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c.
CVE-2020-25969 1 Gnuplot 1 Gnuplot 2025-08-14 N/A 9.8 CRITICAL
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().
CVE-2015-7747 3 Audiofile, Canonical, Fedoraproject 3 Audiofile, Ubuntu Linux, Fedora 2025-08-13 6.8 MEDIUM 8.8 HIGH
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.
CVE-2025-25527 1 Ruijie 2 Rg-nbr2600s, Rg-nbr2600s Firmware 2025-08-13 N/A 5.1 MEDIUM
Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVE-2020-19695 1 F5 1 Njs 2025-08-12 N/A 9.8 CRITICAL
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
CVE-2020-19692 1 F5 1 Njs 2025-08-12 N/A 9.8 CRITICAL
Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file.
CVE-2025-54642 1 Huawei 2 Emui, Harmonyos 2025-08-11 N/A 6.7 MEDIUM
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54641 1 Huawei 2 Emui, Harmonyos 2025-08-11 N/A 6.7 MEDIUM
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-33052 1 Qualcomm 406 205 Mobile, 205 Mobile Firmware, 215 Mobile and 403 more 2025-08-11 N/A 7.8 HIGH
Memory corruption when user provides data for FM HCI command control operations.
CVE-2025-27052 1 Qualcomm 312 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 309 more 2025-08-11 N/A 7.8 HIGH
Memory corruption while processing data packets in diag received from Unix clients.
CVE-2023-33085 1 Qualcomm 210 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 207 more 2025-08-11 N/A 7.8 HIGH
Memory corruption in wearables while processing data from AON.
CVE-2023-33087 1 Qualcomm 236 Apq5053-aa, Apq5053-aa Firmware, Ar8035 and 233 more 2025-08-11 N/A 7.8 HIGH
Memory corruption in Core while processing RX intent request.
CVE-2024-53027 1 Qualcomm 424 205, 205 Firmware, Apq8017 and 421 more 2025-08-11 N/A 7.5 HIGH
Transient DOS may occur while processing the country IE.
CVE-2023-33017 1 Qualcomm 554 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 551 more 2025-08-11 N/A 7.8 HIGH
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.