Vulnerabilities (CVE)

Filtered by CWE-120
Total 2290 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27343 1 Serenityos 1 Serenityos 2022-12-08 5.0 MEDIUM 7.5 HIGH
SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1.
CVE-2022-42756 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-12-07 N/A 5.5 MEDIUM
In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2020-21681 1 Fig2dev Project 1 Fig2dev 2022-12-07 4.3 MEDIUM 5.5 MEDIUM
A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
CVE-2020-21683 1 Fig2dev Project 1 Fig2dev 2022-12-07 4.3 MEDIUM 5.5 MEDIUM
A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
CVE-2020-21684 1 Fig2dev Project 1 Fig2dev 2022-12-07 4.3 MEDIUM 5.5 MEDIUM
A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
CVE-2020-21678 1 Fig2dev Project 1 Fig2dev 2022-12-07 4.3 MEDIUM 5.5 MEDIUM
A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.
CVE-2020-21682 1 Fig2dev Project 1 Fig2dev 2022-12-07 4.3 MEDIUM 5.5 MEDIUM
A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
CVE-2020-24889 1 Libraw 1 Libraw 2022-12-06 5.1 MEDIUM 7.8 HIGH
A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.
CVE-2022-45651 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function.
CVE-2022-45650 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVE-2022-45649 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function.
CVE-2022-45648 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the devName parameter in the formSetDeviceName function.
CVE-2022-45647 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeed parameter in the formSetClientState function.
CVE-2022-45646 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetClientState function.
CVE-2022-45669 1 Tenda 2 I22, I22 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterGet function.
CVE-2022-45670 1 Tenda 2 I22, I22 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.
CVE-2022-45671 1 Tenda 2 I22, I22 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterRule function.
CVE-2022-45672 1 Tenda 2 I22, I22 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.
CVE-2022-45652 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function.
CVE-2022-45643 1 Tendacn 2 Ac6, Ac6 Firmware 2022-12-06 N/A 7.5 HIGH
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the addWifiMacFilter function.