Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,439)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-44839 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a craf...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44838 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44837 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted inpu...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44836 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44835 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44834 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a craf...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44833 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafte...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44832 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44831 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44830 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafte...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44829 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a craf...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-44828 1Dlink 1Dir 823g Firmware Jun 17, 2026 Oct 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2023-35803 1Extremenetworks 1Iq Engine Jun 17, 2026 Oct 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.
CVE-2023-40830 1Tenda 1Ac6 Firmware Jun 17, 2026 Oct 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2023-33035 1Qualcomm 143Apq5053 Aa Firmware Ar8035 FirmwareCsra6620 Firmware+140 more Jun 17, 2026 Oct 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking callback function of AFE from ADSP.
CVE-2023-28539 1Qualcomm 157Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+154 more Jun 17, 2026 Oct 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
CVE-2023-22384 1Qualcomm 9Qca6574au Firmware Qca6696 FirmwareSa6145p Firmware+6 more Jun 17, 2026 Oct 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
CVE-2023-43907 1Optipng Project 1Optipng Jun 17, 2026 Oct 1, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.
CVE-2023-44466 1Linux 1Linux Kernel Jun 17, 2026 Sep 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This...Show more An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.Show less
CVE-2023-43314 1Zyxel 1Pmg2005 T20b Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted...Show more UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid.Show less

Previous 1...118119120...222 Next