Browse CVEs

HIGH 8.8 CVE-2023-49468 Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc. Libde265 Patch available Fix from $1,9502023-12-07 CRITICAL 9.8 CVE-2023-41913 strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buf… Strongswan 5.9.12+ Fix from $2,3002023-12-07 HIGH 7.8 CVE-2023-33092 Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. Aqt1000 Firmware Patch available Fix from $1,9502023-12-05 CRITICAL 9.8 CVE-2023-33082 Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Ar8035 Firmware Mitigation only Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-33083 Memory corruption in WLAN Host while processing RRM beacon on the AP. Ar8035 Firmware Mitigation only Fix from $2,3002023-12-05 HIGH 7.8 CVE-2023-33087 Memory corruption in Core while processing RX intent request. Ar8035 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33017 Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33024 Memory corruption while sending SMS from AP firmware. Aqt1000 Firmware No fix yet Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28579 Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. Fastconnect 6900 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28580 Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. Ar8035 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28546 Memory Corruption in SPS Application while exporting public key in sorter TA. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502023-12-05 CRITICAL 9.8 CVE-2023-49287 TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in … Tinydir 1.2.6+ Fix from $2,3002023-12-04 MEDIUM 6.7 CVE-2023-32859 In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32860 In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-12-04 HIGH 7.5 CVE-2023-47307 Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 allows attackers to cause a denial of serv… Lbt T300 T310 Firmware No fix yet Fix from $1,9502023-11-30 CRITICAL 9.1 CVE-2023-5908 KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information. Industrial Gateway Server after 7.614 Fix from $2,3002023-11-30 HIGH 7.5 CVE-2023-49700 Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffe… Asr1803 Firmware Mitigation only Fix from $1,9502023-11-30 HIGH 7.5 CVE-2023-24294 Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceI… Netlink Ccd Firmware Mitigation only Fix from $1,9502023-11-29 MEDIUM 5.5 CVE-2023-37926 A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Zld after 5.37 Fix from $1,6002023-11-28 CRITICAL 9.8 CVE-2023-4590 Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via … Frhed Mitigation only Fix from $2,3002023-11-27 CRITICAL 9.8 CVE-2023-49208 scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration. Glewlwyd Sso Server 2.7.6+ Fix from $2,3002023-11-23 CRITICAL 9.8 CVE-2023-28812 There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to… Localservicecomponents after 1.0.0.78 Fix from $2,3002023-11-23 MEDIUM 6.5 CVE-2023-28811 There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LA… Nvr 216mh C\(d\) Firmware 4.1.60+ Fix from $1,6002023-11-23 HIGH 8.1 CVE-2023-43887 Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_paramet… Libde265 Patch available Fix from $1,9502023-11-22 MEDIUM 6.7 CVE-2023-6238 A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffe… Linux Kernel Mitigation only Fix from $1,6002023-11-21 HIGH 8.8 CVE-2023-4424 An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE… Zephyr after 3.4.0 Fix from $1,9502023-11-21 CRITICAL 9.8 CVE-2023-38823 Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the fo… Ac6 Firmware Mitigation only Fix from $2,3002023-11-20 MEDIUM 5.5 CVE-2023-47217 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow. Openharmony after 3.2.2 Fix from $1,6002023-11-20 MEDIUM 6.5 CVE-2023-47471 Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header funct… Libde265 Patch available Fix from $1,6002023-11-16 HIGH 7.5 CVE-2023-47345 Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat m… Free5gc No fix yet Fix from $1,9502023-11-15