Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,468)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-37842 1Totolink 1A860r Firmware Jun 17, 2026 Sep 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
CVE-2022-37840 1Totolink 1A860r Firmware Jun 17, 2026 Sep 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
CVE-2022-37839 1Totolink 1A860r Firmware Jun 17, 2026 Sep 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
CVE-2022-36584 1Tenda 1G3 Firmware Jun 17, 2026 Sep 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
CVE-2022-36647 1Davs2 Project 1Davs2 Jun 17, 2026 Sep 2, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.
CVE-2022-25680 1Qualcomm 1Msm8996au Firmware Jun 17, 2026 Sep 2, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
CVE-2022-25659 1Qualcomm 154Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+151 more Jun 17, 2026 Sep 2, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo...Show more Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25657 1Qualcomm 107Apq8017 Firmware Apq8053 FirmwareAqt1000 Firmware+104 more Jun 17, 2026 Sep 2, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobil...Show more Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2022-39047 1Freeciv 1Freeciv Jun 17, 2026 Aug 31, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL.
CVE-2022-26529 1Realtek 1Bluetooth Mesh Software Development Kit Jun 17, 2026 Aug 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vuln...Show more Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.Show less
CVE-2022-26528 1Realtek 1Bluetooth Mesh Software Development Kit Jun 17, 2026 Aug 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can ex...Show more Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.Show less
CVE-2022-26527 1Realtek 1Bluetooth Mesh Software Development Kit Jun 17, 2026 Aug 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can...Show more Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.Show less
CVE-2022-25635 1Realtek 1Bluetooth Mesh Software Development Kit Jun 17, 2026 Aug 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulner...Show more Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.Show less
CVE-2022-32548 1Draytek 68Vigor1000b Firmware Vigor165 FirmwareVigor166 Firmware+65 more Jun 17, 2026 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
CVE-2022-38510 1Tenda 1Tx9 Pro Firmware Jun 17, 2026 Aug 29, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.
CVE-2022-37055 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
CVE-2022-35192 1Dlink 1Dsl 3782 Firmware Jul 9, 2026 Aug 26, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp.
CVE-2022-30984 1Rubrik 1Cdm Jun 17, 2026 Aug 26, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root...Show more A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent.Show less
CVE-2021-23172 1Sound Exchange Project 1Sound Exchange Jun 17, 2026 Aug 25, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
CVE-2021-23159 1Sound Exchange Project 1Sound Exchange Jun 17, 2026 Aug 25, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

Previous 1...152153154...224 Next