Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,202)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-21051 1Adobe 1Photoshop Jun 17, 2026 Feb 11, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vul...Show more Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2020-36152 2Fedoraproject Symonics 2Fedora Libmysofa Jun 17, 2026 Feb 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.
CVE-2021-26577 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.
CVE-2021-26573 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.
CVE-2021-26572 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26571 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26570 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.
CVE-2021-25171 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.
CVE-2021-25170 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.
CVE-2021-25169 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.
CVE-2021-25168 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.
CVE-2021-25142 1Hpe 1Baseboard Management Controller Jun 17, 2026 Feb 8, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.
CVE-2021-22305 1Huawei 1Mate 30 Firmware Jun 17, 2026 Feb 6, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through...Show more There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service.Show less
CVE-2021-22301 1Huawei 1Mate 30 Firmware Jun 17, 2026 Feb 6, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow.
CVE-2020-18750 1Flowpaper 1Pdf2json Jun 17, 2026 Feb 5, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
CVE-2020-6088 1Rockwellautomation 1Flex I/o 1794 Aent/b Firmware Jun 17, 2026 Feb 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communicati...Show more An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2020-36109 1Asus 1Rt Ax86u Firmware Jun 17, 2026 Feb 1, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.
CVE-2021-25138 1Hpe 5Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server FirmwareCloudline Cl5200 Gen9 Server Firmware+2 more Jun 17, 2026 Jan 29, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC...Show more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice uploadsshkey function.Show less
CVE-2021-25137 1Hpe 5Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server FirmwareCloudline Cl5200 Gen9 Server Firmware+2 more Jun 17, 2026 Jan 29, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC...Show more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice startflash_func function.Show less
CVE-2021-25136 1Hpe 5Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server FirmwareCloudline Cl5200 Gen9 Server Firmware+2 more Jun 17, 2026 Jan 29, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC...Show more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsolvideoremotestorage_func function.Show less

Previous 1...172173174...211 Next