Base de CVEs

CVE-2020-37029 Alta · 8.4 CWE-120 30/01/2026

FTPDummy 4.80 - Local Buffer Overflow

FTPDummy 4.80 contains a local buffer overflow vulnerability in its preference file handling that allows attackers to execute arbitrary code. Attackers can craft a malicious preference file with carefully constructed shellcode to trigger a structured exception handler overwrite and execute system commands.

CVE-2020-37028 Alta · 8.4 CWE-120 30/01/2026

Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow

Socusoft Photo to Video Converter Professional 8.07 contains a local buffer overflow vulnerability in the 'Output Folder' input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload and paste it into the output folder field to trigger a stack-based buffer overflow and potentially execute shellcode.

CVE-2020-37025 Alta · 8.4 CWE-120 30/01/2026

Port Forwarding Wizard 4.8.0 - Buffer Overflow

Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code through a long request in the Register feature. Attackers can craft a malicious payload with an egg tag and overwrite SEH handlers to potentially execute shellcode on vulnerable Windows systems.

CVE-2020-37024 Alta · 8.4 CWE-120 30/01/2026

Nidesoft DVD Ripper 5.2.18 - Local Buffer Overflow

Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow vulnerability in the License Code registration parameter that allows attackers to execute arbitrary code. Attackers can craft a malicious payload and paste it into the License Code field to trigger a stack-based buffer overflow and execute shellcode.

CVE-2019-25232 Crítica · 9.8 CWE-120 30/01/2026

Estouro de buffer no campo DNS/IP do painel de clientes do NetPCLinker

O NetPCLinker 1.0.0.0 contém uma vulnerabilidade de estouro de buffer no campo DNS/IP do Painel de Controle de Clientes que permite a atacantes executar shellcode arbitrário. Atacantes podem criar uma carga maliciosa na entrada DNS/IP para sobrescrever manipuladores SEH e executar shellcode ao adicionar um novo cliente.

CVE-2020-37010 Crítica · 9.8 CWE-120 29/01/2026

Estouro de buffer no Advanced Search do BearShare Lite 5.2.5

O BearShare Lite 5.2.5 contém uma vulnerabilidade de estouro de buffer na entrada de palavras-chave da Pesquisa Avançada que permite que atacantes executem código arbitrário. Atacantes podem criar uma carga especialmente projetada para sobrescrever o registrador EIP e executar shellcode ao colar conteúdo malicioso no campo de palavras-chave da pesquisa.

CVE-2020-36995 Alta · 7.5 CWE-120 29/01/2026

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

CVE-2020-36994 Média · 6.2 CWE-120 29/01/2026

QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionality.

CVE-2026-1188 Crítica · 9.8 CWE-120 29/01/2026

Estouro de buffer na API de nomes de recursos de processador da Eclipse OMR port library (CVE-2026-1188)

No componente Eclipse OMR port library desde a versão 0.2.0, uma função de API que retorna os nomes textuais de todos os recursos de processador suportados não levava em conta o separador inserido entre os recursos. Se o buffer de saída fornecido a essa função fosse dimensionado incorretamente, deixar de considerar o separador ao determinar quando uma escrita no buffer era segura podia levar a um estouro de buffer. Este problema está corrigido no Eclipse OMR versão 0.8.0.

CVE-2025-14911 Média · 6.5 CWE-120 27/01/2026

Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

CVE-2025-28162 Média · 5.5 CWE-120 27/01/2026

Classic Buffer Overflow em Libpng

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVE-2020-36940 Crítica · 9.8 CWE-120 27/01/2026

Easy CD & DVD Cover Creator 4.13 - Denial of Service

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash.

CVE-2026-24823 Crítica · 10.0 CWE-120 27/01/2026

Estouro de buffer no decodificador PNG do FASTSHIFT X-TRACK (CWE-120)

Vulnerabilidade de escrita fora dos limites, cópia de buffer sem verificação do tamanho da entrada ('Estouro de buffer clássico') no FASTSHIFT X-TRACK (módulos Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src). Esta vulnerabilidade está associada aos arquivos de programa inflate.C. Este problema afeta o X-TRACK: até v2.7 inclusive.

CVE-2026-24810 Crítica · 10.0 CWE-120 27/01/2026

Estouro de buffer no módulo cJSON do RethinkDB

Vulnerabilidade de Cópia de Buffer sem Verificação do Tamanho da Entrada ('Estouro Clássico de Buffer') no rethinkdb (módulos src/cjson). Esta vulnerabilidade está associada aos arquivos de programa cJSON.Cc. Este problema afeta o rethinkdb: até a v2.4.4.

CVE-2026-24800 Crítica · 10.0 CWE-120 27/01/2026

Estouro de buffer clássico no inflate do zlib embutido no Tildearrow Furnace (CWE-120)

Vulnerabilidade de Escrita Fora dos Limites, Cópia de Buffer Sem Verificação do Tamanho da Entrada ('Buffer Overflow Clássico') no tildearrow furnace (módulos extern/zlib). Esta vulnerabilidade está associada aos arquivos de programa inflate.C.

CVE-2026-24799 Média · 5.2 CWE-120 27/01/2026

A heap-based buffer over-read or buffer overflow in davisking/dlib

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking dlib (dlib/external/zlib modules). This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9.

CVE-2026-24344 Alta · 7.3 CWE-120 27/01/2026

Multiple Buffer Overflows in EZCast Pro II Dongle

Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution

CVE-2025-69209 Média · 6.9 CWE-120 21/01/2026

ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.7 allows an attacker to trigger a stack-based buffer overflow when converting floating-point values to strings with high precision. By passing very large `decimalPlaces` values to the affected String constructors or concat methods, the `dtostrf` function writes beyond fixed-size stack buffers, causing memory corruption and denial of service. Under specific conditions, this could enable arbitrary code execution on AVR-based Arduino boards. ### Patches - The Fix is included starting from the `1.8.7` release available from the following link [ArduinoCore-avr v1.8.7](https://github.com/arduino/ArduinoCore-avr) - The Fixing Commit is available at the following link [1a6a417f89c8901dad646efce74ae9d3ddebfd59](https://github.com/arduino/ArduinoCore-avr/pull/613/commits/1a6a417f89c8901dad646efce74ae9d3ddebfd59) ### References - [ASEC-26-001 ArduinoCore-avr vXXXX Resolves Buffer Overflow Vulnerability](https://support.arduino.cc/hc/en-us/articles/XXXXX) ### Credits - Maxime Rossi Bellom and Ramtine Tofighi Shirazi from SecMate (https://secmate.dev/)

CVE-2025-68137 Alta · 8.3 Exploit público CWE-120 21/01/2026

EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining length to read is computed using the current length subtracted by the header length which results in a negative value. This value is then interpreted as `SIZE_MAX` (or slightly less) because the expected type of the argument is `size_t`. Depending on whether the server is plain TCP or TLS, this leads to either an infinite loop or a stack buffer overflow. Version 2025.10.0 fixes the issue.

CVE-2021-47854 Crítica · 9.8 CWE-120 21/01/2026

DD-WRT 45723 - UPNP Buffer Overflow

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.

CVE-2025-55131 Alta · 7.1 CWE-120 20/01/2026

Classic Buffer Overflow em Nodejs Node

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact.

CVE-2026-1110 Alta · 7.8 CWE-120 18/01/2026

cijliu librtsp rtsp_parse_method buffer overflow

A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes buffer overflow. It is possible to launch the attack on the local host. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-1109 Alta · 7.8 CWE-120 18/01/2026

cijliu librtsp rtsp_parse_request buffer overflow

A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_request. The manipulation results in buffer overflow. Attacking locally is a requirement. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-1108 Alta · 7.8 CWE-120 17/01/2026

cijliu librtsp rtsp_rely_dumps buffer overflow

A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2021-47815 Alta · 7.5 CWE-120 15/01/2026

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.