CVE Database

CVE-2026-21382 High · 7.8 CWE-120 Apr 6, 2026

Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

CVE-2025-47389 High · 7.8 CWE-120 Apr 6, 2026

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

CVE-2026-31066 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 810g Firmware

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31065 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 520w Firmware

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31063 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 1200gw Firmware

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31062 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 520w Firmware

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31061 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 810g Firmware

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31060 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 810g Firmware

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-31058 Medium · 4.5 CWE-120 Apr 6, 2026

Classic Buffer Overflow in Utt 1200gw Firmware

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2018-25237 Critical · 9.8 CWE-120 Apr 3, 2026

Hirschmann HiSecOS Buffer Overflow via HTTPS Login

Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by submitting a password longer than 128 characters. Attackers can exploit improper bounds checking in password handling to overflow a fixed-size buffer and achieve denial of service or remote code execution.

CVE-2026-34124 Medium · 6.5 CWE-120 Apr 2, 2026

Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent network may send a crafted HTTP request to cause buffer overflow and memory corruption, leading to system interruption or device reboot.

CVE-2026-34875 Critical · 9.8 CWE-120 Apr 1, 2026

Classic Buffer Overflow in Trustedfirmware Mbed Tls

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.

CVE-2026-31027 Critical · 9.8 CWE-120 Apr 1, 2026

Classic Buffer Overflow in Totolink A3600r Firmware

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.

CVE-2026-5279 High · 8.8 CWE-120 Apr 1, 2026

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5164 Medium · 5.5 CWE-120 Mar 30, 2026

Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. This can cause a system crash, resulting in a Denial of Service (DoS).

CVE-2026-1679 High · 7.8 CWE-120 Mar 27, 2026

net: eswifi socket send payload length not bounded

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send API; no remote attacker can reach it directly.

CVE-2026-29976 Medium · 6.2 CWE-120 Mar 26, 2026

Classic Buffer Overflow in Zerbea Hcxtools

Buffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0.1-43-g2ee308e allows a local attacker to obtain sensitive information via the getradiotapfield() function

CVE-2024-51347 High · 7.2 CWE-120 Mar 25, 2026

A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera…

A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function.

CVE-2026-28875 High · 7.5 CWE-120 Mar 24, 2026

Classic Buffer Overflow in Apple Ipados

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.

CVE-2026-28858 Critical · 9.8 CWE-120 Mar 24, 2026

Classic Buffer Overflow in Apple Ipados

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-28841 Medium · 6.2 CWE-120 Mar 24, 2026

Classic Buffer Overflow in Apple Macos

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination.

CVE-2026-4729 Critical · 9.8 CWE-120 Mar 24, 2026

Memory safety bugs fixed in Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVE-2026-4721 Critical · 9.8 CWE-120 Mar 24, 2026

Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVE-2026-4720 Critical · 9.8 CWE-120 Mar 24, 2026

Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVE-2026-30006 Medium · 6.2 CWE-120 Mar 23, 2026

Classic Buffer Overflow in Xnview Nconvert

XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.