Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,468)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-22728 3Apache DebianFedoraproject 3Debian Linux FedoraLibapreq2 Jun 17, 2026 Aug 25, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of s...Show more A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.Show less
CVE-2021-4214 3Debian LibpngNetapp 3Debian Linux LibpngOntap Select Deploy Administration Utility Jun 17, 2026 Aug 24, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading...Show more A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.Show less
CVE-2022-23747 1Sony 3Xperia 1 Firmware Xperia 5 FirmwareXperia Pro Firmware Jun 17, 2026 Aug 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
CVE-2022-38236 1Xpdf Project 1Xpdf Jun 17, 2026 Aug 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
CVE-2022-35011 1Pngdec Project 1Pngdec Jun 17, 2026 Aug 16, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.
CVE-2022-35003 1Bitbanksoftware 1Jpegdec Jun 17, 2026 Aug 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
CVE-2022-34998 1Bitbanksoftware 1Jpegdec Jun 17, 2026 Aug 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
CVE-2022-36293 1Nintendo 1Wi Fi Network Adaptor Wap 001 Firmware Jun 17, 2026 Aug 16, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to execute arbitrary code via unspecified vectors.
CVE-2022-24949 1Eternal Terminal Project 1Eternal Terminal Jun 17, 2026 Aug 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().
CVE-2022-36525 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Aug 15, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
CVE-2022-38221 1The Isle Evrima Project 1The Isle Evrima Jun 17, 2026 Aug 15, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possib...Show more A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code.Show less
CVE-2022-20842 1Cisco 4Rv340 Firmware Rv340w FirmwareRv345 Firmware+1 more Jun 17, 2026 Aug 10, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an...Show more Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2022-20827 1Cisco 9Rv160 Firmware Rv160w FirmwareRv260 Firmware+6 more Jun 17, 2026 Aug 10, 2022 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an...Show more Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2022-20841 1Cisco 9Rv160 Firmware Rv160w FirmwareRv260 Firmware+6 more Jun 17, 2026 Aug 10, 2022 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an...Show more Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2022-26342 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can s...Show more A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-24029 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configurati...Show more A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the rp-pppoe.so binary.Show less
CVE-2022-24028 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configurati...Show more A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommonprod.so binary.Show less
CVE-2022-24027 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configurati...Show more A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommon.so binary.Show less
CVE-2022-24026 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configurati...Show more A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the telnet_ate_monitor binary.Show less
CVE-2022-24025 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configurati...Show more A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the sntp binary.Show less

Previous 1...153154155...224 Next