Vulnerabilities (CVE)

Filtered by CWE-120
Total 4549 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26768 1 Liblouis 1 Liblouis 2026-06-17 N/A 7.5 HIGH
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
CVE-2023-26767 1 Liblouis 1 Liblouis 2026-06-17 N/A 7.5 HIGH
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
CVE-2023-26733 1 Tinytiff Project 1 Tinytiff 2026-06-17 N/A 7.8 HIGH
Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file.
CVE-2023-26616 1 Dlink 2 Dir-823g, Dir-823g Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.
CVE-2023-26612 1 Dlink 2 Dir-823g, Dir-823g Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.
CVE-2023-26320 1 Mi 2 Xiaomi Router Ax3200, Xiaomi Router Ax3200 Firmware 2026-06-17 N/A 7.5 HIGH
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
CVE-2023-26319 1 Mi 2 Xiaomi Router Ax3200, Xiaomi Router Ax3200 Firmware 2026-06-17 N/A 6.7 MEDIUM
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
CVE-2023-26318 1 Mi 2 Xiaomi Router Ax3200, Xiaomi Router Ax3200 Firmware 2026-06-17 N/A 6.7 MEDIUM
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.
CVE-2023-26110 1 Node-bluetooth Project 1 Node-bluetooth 2026-06-17 N/A 7.3 HIGH
All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
CVE-2023-26109 1 Node-bluetooth-serial-port Project 1 Node-bluetooth-serial-port 2026-06-17 N/A 7.3 HIGH
All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
CVE-2023-26076 1 Samsung 10 Exynos 1280, Exynos 1280 Firmware, Exynos 2200 and 7 more 2026-06-17 N/A 7.6 HIGH
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.
CVE-2023-26075 1 Samsung 18 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 15 more 2026-06-17 N/A 7.6 HIGH
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List.
CVE-2023-25664 1 Google 1 Tensorflow 2026-06-17 N/A 7.5 HIGH
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.
CVE-2023-25642 1 Zte 4 Mc801a, Mc801a1, Mc801a1 Firmware and 1 more 2026-06-17 N/A 5.9 MEDIUM
There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack. 
CVE-2023-25505 1 Nvidia 2 Bmc, Dgx-1 2026-06-17 N/A 7.8 HIGH
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.
CVE-2023-25435 1 Libtiff 1 Libtiff 2026-06-17 N/A 5.5 MEDIUM
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.
CVE-2023-25434 1 Libtiff 1 Libtiff 2026-06-17 N/A 8.8 HIGH
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.
CVE-2023-25433 1 Libtiff 1 Libtiff 2026-06-17 N/A 5.5 MEDIUM
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.
CVE-2023-25076 1 Sniproxy Project 1 Sniproxy 2026-06-17 N/A 9.8 CRITICAL
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability.
CVE-2023-24851 1 Qualcomm 382 Ar8035, Ar8035 Firmware, Csr8811 and 379 more 2026-06-17 N/A 7.8 HIGH
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.