Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,417)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-50670 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request i...Show more A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters.Show less
CVE-2025-50669 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint.
CVE-2025-50668 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint.
CVE-2025-50667 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wan_line_detection.asp endpoint.
CVE-2025-50666 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET...Show more A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, user_id, log, and time.Show less
CVE-2025-50665 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET...Show more A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, mem_gb2312, and mem_utf8 parameters.Show less
CVE-2025-50654 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint.
CVE-2025-50653 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint.
CVE-2025-50652 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.
CVE-2025-50650 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint.
CVE-2025-50649 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.
CVE-2025-50648 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint.
CVE-2025-50647 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.
CVE-2025-50646 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.
CVE-2025-50645 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessive...Show more A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.Show less
CVE-2025-50644 1Dlink 1Di 8003 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.
CVE-2025-52222 1Dlink 9Di 8003 Firmware Di 8003g FirmwareDi 8100 Firmware+6 more Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered t...Show more D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
CVE-2025-52221 1Tenda 1Ac6 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
CVE-2025-45059 1Dlink 1Di 8300 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45058 1Dlink 1Di 8300 Firmware Jul 25, 2026 Apr 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Previous 1...202122...221 Next