Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2018-03-30 CVE-2017-17771 Classic Buffer Overflow vulnerability in Google Android
In msm_isp_prepare_v4l2_buf in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-02-12, an array out of bounds can occur.
local
low complexity
google CWE-120
7.8
2018-03-09 CVE-2018-7238 Classic Buffer Overflow vulnerability in Schneider-Electric products
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.
network
low complexity
schneider-electric CWE-120
critical
9.8
2018-03-07 CVE-2018-1000117 Classic Buffer Overflow vulnerability in Python
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege.
local
low complexity
python CWE-120
6.7
2018-02-08 CVE-2018-6789 Classic Buffer Overflow vulnerability in multiple products
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1.
network
low complexity
exim debian canonical CWE-120
critical
9.8
2018-01-10 CVE-2017-11003 Classic Buffer Overflow vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size.
local
low complexity
google CWE-120
7.8
2017-11-16 CVE-2017-11015 Classic Buffer Overflow vulnerability in Google Android
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128 which may result in buffer overflow since the frame parser allows challenge text of length up to 253 bytes, but the driver can not handle challenge text larger than 128 bytes.
local
low complexity
google CWE-120
7.8
2017-11-16 CVE-2017-11014 Classic Buffer Overflow vulnerability in Google Android
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing a Measurement Request IE in a Roam Neighbor Action Report, a buffer overflow can occur.
local
low complexity
google CWE-120
7.8
2017-11-16 CVE-2017-11013 Classic Buffer Overflow vulnerability in Google Android
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset (in function UnpackCore) is increased for each loop, while there is no boundary check against "pIe->arraybound".
local
low complexity
google CWE-120
7.8
2017-10-24 CVE-2017-15222 Classic Buffer Overflow vulnerability in Nftp Project Nftp
Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.
network
low complexity
nftp-project CWE-120
critical
9.8
2017-09-21 CVE-2017-8278 Classic Buffer Overflow vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.
local
low complexity
google CWE-120
7.8