Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45043 1Qnap 2Qts Quts Hero Jun 17, 2026 Jan 5, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via...Show more A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Show less
CVE-2023-45042 1Qnap 2Qts Quts Hero Jun 17, 2026 Jan 5, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via...Show more A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Show less
CVE-2023-45041 1Qnap 2Qts Quts Hero Jun 17, 2026 Jan 5, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via...Show more A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Show less
CVE-2023-45040 1Qnap 2Qts Quts Hero Jun 17, 2026 Jan 5, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via...Show more A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Show less
CVE-2023-45039 1Qnap 2Qts Quts Hero Jun 17, 2026 Jan 5, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via...Show more A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Show less
CVE-2023-50991 1Tenda 1I29 Firmware Jun 17, 2026 Jan 5, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.
CVE-2023-52309 1Paddlepaddle 1Paddlepaddle Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
CVE-2023-52307 1Paddlepaddle 1Paddlepaddle Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
CVE-2023-52304 1Paddlepaddle 1Paddlepaddle Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
CVE-2023-49556 1Yasm Project 1Yasm Jun 17, 2026 Jan 3, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.
CVE-2023-33113 1Qualcomm 122Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+119 more Jun 17, 2026 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
CVE-2023-33085 1Qualcomm 102Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+99 more Jun 17, 2026 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in wearables while processing data from AON.
CVE-2023-33030 1Qualcomm 293315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+290 more Jun 17, 2026 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in HLOS while running playready use-case.
CVE-2023-33025 1Qualcomm 24Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+21 more Jun 17, 2026 Jan 2, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
CVE-2023-50096 1St 1X Cube Safea1 Jun 17, 2026 Jan 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeA_ReceiveBytes buffer overflow in the X-C...Show more STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeA_ReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications (1.2.0), and thus can affect user-written code that was derived from a published sample application.Show less
CVE-2023-51434 1Hihonor 1Magic Ui Jun 17, 2026 Dec 29, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
CVE-2023-47091 1Stormshield 1Stormshield Network Security Jun 17, 2026 Dec 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie...Show more An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.Show less
CVE-2023-51771 1Starnight 1Micro Http Server Jun 17, 2026 Dec 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI.
CVE-2023-7095 1Totolink 1A7100ru Firmware Jun 17, 2026 Dec 25, 2023 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP...Show more A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248942 is the identifier assigned to this vulnerability.Show less
CVE-2023-48704 1Clickhouse 2Clickhouse Clickhouse Cloud Jun 17, 2026 Dec 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could sen...Show more ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on port 9000/tcp, triggering a bug in the decompression logic of Gorilla codec that crashes the ClickHouse server process. This attack does not require authentication. This issue has been addressed in ClickHouse Cloud version 23.9.2.47551 and ClickHouse versions 23.10.5.20, 23.3.18.15, 23.8.8.20, and 23.9.6.20.Show less

Previous 1...111112113...222 Next