Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2022-06-30 CVE-2021-37778 Classic Buffer Overflow vulnerability in Gps-Sdr-Sim Project Gps-Sdr-Sim 1.0
There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution.
network
low complexity
gps-sdr-sim-project CWE-120
critical
9.8
2022-06-20 CVE-2022-21742 Classic Buffer Overflow vulnerability in Realtek products
Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function.
low complexity
realtek CWE-120
6.5
2022-06-17 CVE-2022-31784 Classic Buffer Overflow vulnerability in Mitel Mivoice Business and Mivoice Business Express
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters.
network
low complexity
mitel CWE-120
critical
9.8
2022-06-16 CVE-2022-31626 Classic Buffer Overflow vulnerability in multiple products
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
network
low complexity
php debian CWE-120
8.8
2022-06-15 CVE-2021-41413 Classic Buffer Overflow vulnerability in Ok-File-Formats Project Ok-File-Formats 2021912
ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.
local
low complexity
ok-file-formats-project CWE-120
7.8
2022-06-14 CVE-2021-30327 Classic Buffer Overflow vulnerability in Qualcomm products
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
low complexity
qualcomm CWE-120
6.8
2022-06-14 CVE-2021-35081 Classic Buffer Overflow vulnerability in Qualcomm products
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
network
low complexity
qualcomm CWE-120
critical
9.8
2022-06-14 CVE-2021-35102 Classic Buffer Overflow vulnerability in Qualcomm products
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
local
low complexity
qualcomm CWE-120
7.8
2022-06-14 CVE-2021-35104 Classic Buffer Overflow vulnerability in Qualcomm products
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
network
low complexity
qualcomm CWE-120
critical
9.8
2022-06-14 CVE-2021-35114 Classic Buffer Overflow vulnerability in Qualcomm Sa8540P Firmware and Sa9000P Firmware
Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto
local
low complexity
qualcomm CWE-120
7.8