Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2022-07-12 CVE-2022-2211 Classic Buffer Overflow vulnerability in multiple products
A vulnerability was found in libguestfs.
network
low complexity
libguestfs redhat CWE-120
6.5
2022-07-12 CVE-2021-39999 Classic Buffer Overflow vulnerability in Huawei Ese620X Vess Firmware V100R001C10Spc200/V100R001C20Spc200
There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200.
network
low complexity
huawei CWE-120
7.5
2022-07-12 CVE-2022-34740 Classic Buffer Overflow vulnerability in Huawei Emui, Harmonyos and Magic UI
The NFC module has a buffer overflow vulnerability.
low complexity
huawei CWE-120
6.5
2022-07-12 CVE-2022-34741 Classic Buffer Overflow vulnerability in Huawei Emui, Harmonyos and Magic UI
The NFC module has a buffer overflow vulnerability.
low complexity
huawei CWE-120
6.5
2022-06-30 CVE-2021-37778 Classic Buffer Overflow vulnerability in Gps-Sdr-Sim Project Gps-Sdr-Sim 1.0
There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution.
network
low complexity
gps-sdr-sim-project CWE-120
critical
9.8
2022-06-20 CVE-2022-21742 Classic Buffer Overflow vulnerability in Realtek products
Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function.
low complexity
realtek CWE-120
6.5
2022-06-17 CVE-2022-31784 Classic Buffer Overflow vulnerability in Mitel Mivoice Business and Mivoice Business Express
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters.
network
low complexity
mitel CWE-120
critical
9.8
2022-06-16 CVE-2022-31626 Classic Buffer Overflow vulnerability in multiple products
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
network
low complexity
php debian CWE-120
8.8
2022-06-15 CVE-2021-41413 Classic Buffer Overflow vulnerability in Ok-File-Formats Project Ok-File-Formats 2021912
ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.
local
low complexity
ok-file-formats-project CWE-120
7.8
2022-06-14 CVE-2021-30327 Classic Buffer Overflow vulnerability in Qualcomm products
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
low complexity
qualcomm CWE-120
6.8