Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,417)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-38409 1Qualcomm 25Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more Jun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while station LL statistic handling.
CVE-2024-33030 1Qualcomm 22Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+19 more Jun 17, 2026 Nov 4, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
CVE-2024-44234 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Nov 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1,...Show more The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected system termination.Show less
CVE-2024-44233 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Nov 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1,...Show more The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected system termination.Show less
CVE-2024-44232 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Nov 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1,...Show more The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected system termination.Show less
CVE-2024-48289 - - Jun 17, 2026 Nov 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service (DoS) via supplying a crafted LL_PAUSE_ENC_REQ packet.
CVE-2024-10559 1Razormist 1Airport Booking Management System Jun 17, 2026 Oct 31, 2024 4.8 MEDIUM· v4 7.8 HIGH· v3 4.3 MEDIUM· v2 A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer...Show more A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.Show less
CVE-2024-9997 1Autodesk 10Autocad Autocad Advance SteelAutocad Architecture+7 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or...Show more A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-8592 1Autodesk 8Autocad Autocad Advance SteelAutocad Architecture+5 more Jun 17, 2026 Oct 29, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensiti...Show more A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-10467 1Mozilla 2Firefox Thunderbird Jun 17, 2026 Oct 29, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited...Show more Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.Show less
CVE-2024-44218 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 Oct 28, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to hea...Show more This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to heap corruption.Show less
CVE-2024-44144 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Oct 28, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing...Show more A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination.Show less
CVE-2024-42011 - - Jun 17, 2026 Oct 28, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 The Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat.
CVE-2024-10371 1Razormist 1Payroll Management System Jun 17, 2026 Oct 25, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 5.8 MEDIUM· v2 A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been dis...Show more A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-48426 1Assimp 1Assimp Jun 17, 2026 Oct 24, 2024 N/A· v4 6.2 MEDIUM· v3 N/A· v2 A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address (...Show more A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address (0x1000c9714971).Show less
CVE-2024-48425 1Assimp 1Assimp Jun 17, 2026 Oct 24, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access vi...Show more A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a null or invalid pointer dereference.Show less
CVE-2024-48424 1Assimp 1Assimp Jun 17, 2026 Oct 24, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
CVE-2024-46478 1Htmldoc Project 1Htmldoc Jun 17, 2026 Oct 24, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
CVE-2024-44331 - - Jun 17, 2026 Oct 22, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
CVE-2024-40494 1Keith Cullen 1Freecoap Jun 17, 2026 Oct 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet.

Previous 1...848586...221 Next