Vulnerabilities (CVE)

Filtered by CWE-120
Total 3125 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-1277 2025-04-16 N/A 7.8 HIGH
A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVE-2025-3678 2025-04-16 7.5 HIGH 7.3 HIGH
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component HELP Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-29480 1 Osgeo 1 Gdal 2025-04-15 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function.
CVE-2025-29482 1 Struktur 1 Libheif 2025-04-15 N/A 6.2 MEDIUM
Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265.
CVE-2025-29481 1 Libbpf Project 1 Libbpf 2025-04-15 N/A 6.2 MEDIUM
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.
CVE-2022-45712 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
CVE-2022-45710 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
CVE-2022-45708 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function.
CVE-2022-45707 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
CVE-2022-45706 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
CVE-2022-45721 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
CVE-2022-45720 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function.
CVE-2022-45719 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
CVE-2022-45718 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
CVE-2022-45716 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
CVE-2022-45715 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function.
CVE-2022-45714 1 Ip-com 2 M50, M50 Firmware 2025-04-15 N/A 9.8 CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
CVE-2025-28395 1 Dlink 2 Di-8100, Di-8100 Firmware 2025-04-15 N/A 7.1 HIGH
D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
CVE-2025-28398 1 Dlink 2 Di-8100, Di-8100 Firmware 2025-04-15 N/A 7.1 HIGH
D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.
CVE-2022-49754 1 Linux 1 Linux Kernel 2025-04-14 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Smatch Warning: net/bluetooth/mgmt_util.c:375 mgmt_mesh_add() error: __memcpy() 'mesh_tx->param' too small (48 vs 50) Analysis: 'mesh_tx->param' is array of size 48. This is the destination. u8 param[sizeof(struct mgmt_cp_mesh_send) + 29]; // 19 + 29 = 48. But in the caller 'mesh_send' we reject only when len > 50. len > (MGMT_MESH_SEND_SIZE + 31) // 19 + 31 = 50.