Base de CVEs

CVE-2026-31063 Média · 4.5 CWE-120 06/04/2026

Classic Buffer Overflow em Utt 1200gw Firmware

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31062 Média · 4.5 CWE-120 06/04/2026

Classic Buffer Overflow em Utt 520w Firmware

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31061 Média · 4.5 CWE-120 06/04/2026

Classic Buffer Overflow em Utt 810g Firmware

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31060 Média · 4.5 CWE-120 06/04/2026

Classic Buffer Overflow em Utt 810g Firmware

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31058 Média · 4.5 CWE-120 06/04/2026

Classic Buffer Overflow em Utt 1200gw Firmware

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2018-25237 Crítica · 9.8 CWE-120 03/04/2026

Estouro de buffer no login HTTPS do Hirschmann HiSecOS

Dispositivos Hirschmann HiSecOS em versões anteriores à 05.3.03 contêm uma vulnerabilidade de estouro de buffer na interface de login HTTPS quando a autenticação RADIUS está habilitada, o que permite que atacantes remotos derrubem o dispositivo ou executem código arbitrário ao enviar uma senha com mais de 128 caracteres. Atacantes podem explorar a verificação inadequada de limites no tratamento de senhas para transbordar um buffer de tamanho fixo e alcançar negação de serviço ou execução remota de código.

CVE-2026-34124 Média · 6.5 CWE-120 02/04/2026

Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent network may send a crafted HTTP request to cause buffer overflow and memory corruption, leading to system interruption or device reboot.

CVE-2026-34875 Crítica · 9.8 CWE-120 01/04/2026

Classic Buffer Overflow em Trustedfirmware Mbed Tls

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.

CVE-2026-31027 Crítica · 9.8 CWE-120 01/04/2026

Classic Buffer Overflow em Totolink A3600r Firmware

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.

CVE-2026-5279 Alta · 8.8 CWE-120 01/04/2026

Classic Buffer Overflow em Google Chrome

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5164 Média · 5.5 CWE-120 30/03/2026

Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. This can cause a system crash, resulting in a Denial of Service (DoS).

CVE-2026-1679 Alta · 7.8 CWE-120 27/03/2026

net: eswifi socket send payload length not bounded

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send API; no remote attacker can reach it directly.

CVE-2026-29976 Média · 6.2 CWE-120 26/03/2026

Classic Buffer Overflow em Zerbea Hcxtools

Buffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0.1-43-g2ee308e allows a local attacker to obtain sensitive information via the getradiotapfield() function

CVE-2024-51347 Alta · 7.2 CWE-120 25/03/2026

A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera…

A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function.

CVE-2026-28875 Alta · 7.5 CWE-120 24/03/2026

Classic Buffer Overflow em Apple Ipados

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.

CVE-2026-28858 Crítica · 9.8 CWE-120 24/03/2026

Classic Buffer Overflow em Apple Ipados

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-28841 Média · 6.2 CWE-120 24/03/2026

Classic Buffer Overflow em Apple Macos

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination.

CVE-2026-4729 Crítica · 9.8 CWE-120 24/03/2026

Memory safety bugs fixed in Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVE-2026-4721 Crítica · 9.8 CWE-120 24/03/2026

Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVE-2026-4720 Crítica · 9.8 CWE-120 24/03/2026

Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVE-2026-30006 Média · 6.2 CWE-120 23/03/2026

Classic Buffer Overflow em Xnview Nconvert

XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.

CVE-2026-27459 Crítica · 9.8 CWE-120 17/03/2026

pyOpenSSL DTLS cookie callback buffer overflow

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.

CVE-2026-32706 Alta · 8.1 CWE-120 16/03/2026

PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf_rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsf_rc is enabled on a CRSF serial port, an adjacent/raw-serial attacker can trigger memory corruption and crash PX4. This vulnerability is fixed in 1.17.0-rc2.

CVE-2026-0849 Média · 6.8 CWE-120 16/03/2026

crypto: ATAES132A response length allows stack buffer overflow

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution.

CVE-2026-32746 Crítica · 9.8 Exploit público CWE-120 13/03/2026

Classic Buffer Overflow em Gnu Inetutils

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.