Browse CVEs

HIGH 7.8 CVE-2021-36999 There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing … Emui Mitigation only Fix from $1,9502021-10-28 HIGH 7.8 CVE-2021-38258 NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback(). Mcuxpresso Software Development Kit No fix yet Fix from $1,9502021-10-25 HIGH 7.8 CVE-2021-38260 NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor(). Mcuxpresso Software Development Kit No fix yet Fix from $1,9502021-10-25 HIGH 7.8 CVE-2020-28969 Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) via a crafted PDF file. Pdf Shapingup Mitigation only Fix from $1,9502021-10-22 HIGH 7.8 CVE-2020-28963 Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function. Zip Password Recovery No fix yet Fix from $1,9502021-10-22 HIGH 8.8 CVE-2020-28967EPSS 9% FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability allows attackers to elevate … Flashget No fix yet Fix from $1,9502021-10-22 HIGH 7.1 CVE-2021-42716 An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to… Fedora Patch available Fix from $1,9502021-10-21 HIGH 7.8 CVE-2021-1983 Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-1984 Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.1 CVE-2021-30297 Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Comp… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 MEDIUM 6.7 CVE-2021-1966 Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdrag… Aqt1000 Firmware Patch available Fix from $1,6002021-10-20 CRITICAL 9.8 CVE-2021-38297EPSS 11% Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOO… Go 1.16.9 / 1.17.2+ Fix from $2,3002021-10-18 CRITICAL 9.8 CVE-2021-37726 A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba ha… Aruba Instant 8.7.1.3+ Fix from $2,3002021-10-12 CRITICAL 9.8 CVE-2020-27372 A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function. Brandy No fix yet Fix from $2,3002021-10-11 CRITICAL 9.8 CVE-2021-40239 A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c Miniftpd No fix yet Fix from $2,3002021-10-11 CRITICAL 9.8 CVE-2021-35977 An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages.… Realport after 4.8.488.0 Fix from $2,3002021-10-08 HIGH 7.5 CVE-2021-41794 ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can s… Open5gs after 2.3.3 Fix from $1,9502021-10-07 HIGH 8.8 CVE-2021-34780 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unau… Business 220 8t E 2g Firmware after 1.2.0.6 Fix from $1,9502021-10-06 HIGH 8.8 CVE-2021-34779 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unau… Business 220 8t E 2g Firmware after 1.2.0.6 Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-25496 A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows a… Notes 4.3.02.61+ Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-25497 A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows a… Notes 4.3.02.61+ Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-25498 A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows… Notes 4.3.02.61+ Fix from $1,9502021-10-06 HIGH 7.8 CVE-2021-25494 A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execut… Notes 4.3.02.61+ Fix from $1,9502021-10-06 MEDIUM 6.7 CVE-2021-25467 Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows … Android Mitigation only Fix from $1,6002021-10-06 MEDIUM 6.7 CVE-2021-25469 A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $1,6002021-10-06 HIGH 7.8 CVE-2021-36051EPSS 6% XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the … Debian Linux after 2020.1 Fix from $1,9502021-10-04 HIGH 7.8 CVE-2021-35297 Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An at… Dbase Viewer Mitigation only Fix from $1,9502021-10-01 HIGH 7.5 CVE-2021-35944 Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memc… Couchbase Server after 6.6.2 Fix from $1,9502021-09-29 HIGH 7.5 CVE-2021-35945 Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash mem… Couchbase Server after 6.6.2 Fix from $1,9502021-09-29 HIGH 7.8 CVE-2021-40709 Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafte… Photoshop 2020 after 22.5 Fix from $1,9502021-09-27