Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-120
Total 1596 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-32788 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2022-09-22 N/A 9.8 CRITICAL
A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution.
CVE-2022-39003 1 Huawei 2 Emui, Magic Ui 2022-09-21 N/A 9.1 CRITICAL
Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components.
CVE-2022-25708 1 Qualcomm 34 Sd888 5g, Sd888 5g Firmware, Sd 8 Gen1 5g and 31 more 2022-09-20 N/A 9.8 CRITICAL
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25688 1 Qualcomm 300 Apq8009, Apq8009 Firmware, Apq8009w and 297 more 2022-09-20 N/A 9.8 CRITICAL
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25686 1 Qualcomm 214 Apq8017, Apq8017 Firmware, Apq8053 and 211 more 2022-09-20 N/A 9.8 CRITICAL
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-38325 1 Tendacn 4 Ac15, Ac15 Firmware, Ac18 and 1 more 2022-09-19 N/A 9.8 CRITICAL
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.
CVE-2022-38326 1 Tendacn 4 Ac15, Ac15 Firmware, Ac18 and 1 more 2022-09-19 N/A 9.8 CRITICAL
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-40438 1 Axiosys 1 Bento4 2022-09-19 N/A 6.5 MEDIUM
Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
CVE-2022-38827 1 Totolink 2 T6, T6 Firmware 2022-09-16 N/A 9.8 CRITICAL
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
CVE-2022-38829 1 Tenda 2 Rx9 Pro, Rx9 Pro Firmware 2022-09-16 N/A 9.8 CRITICAL
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVE-2022-38830 1 Tenda 2 Rx9 Pro, Rx9 Pro Firmware 2022-09-16 N/A 9.8 CRITICAL
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVE-2022-38831 1 Tenda 2 Rx9 Pro, Rx9 Pro Firmware 2022-09-16 N/A 9.8 CRITICAL
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVE-2022-3077 1 Linux 1 Linux Kernel 2022-09-15 N/A 5.5 MEDIUM
A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_BLOCK_PROC_CALL case (via the ioctl I2C_SMBUS) with malicious input data. This flaw could allow a local user to crash the system.
CVE-2019-18960 1 Amazon 1 Firecracker 2022-09-13 7.5 HIGH 9.8 CRITICAL
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.
CVE-2022-31414 1 Dlink 2 Dir-1960, Dir-1960 Firmware 2022-09-12 N/A 7.5 HIGH
D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2021-34236 1 Netgear 2 R8000, R8000 Firmware 2022-09-12 N/A 9.8 CRITICAL
Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficiently long parameter 'register_country'.
CVE-2022-27008 1 F5 1 Njs 2022-09-09 5.0 MEDIUM 7.5 HIGH
nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array.
CVE-2022-36587 1 Tenda 2 G3, G3 Firmware 2022-09-09 N/A 9.8 CRITICAL
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
CVE-2022-40112 1 Totolink 2 A3002r, A3002r Firmware 2022-09-09 N/A 7.5 HIGH
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.
CVE-2022-36585 1 Tenda 2 G3, G3 Firmware 2022-09-09 N/A 9.8 CRITICAL
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.