Vulnerabilities (CVE)

Filtered by CWE-680
Total 112 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-23326 3 Linux, Microsoft, Nvidia 3 Linux Kernel, Windows, Triton Inference Server 2026-06-17 N/A 7.5 HIGH
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.
CVE-2025-21442 1 Qualcomm 52 Qam8255p, Qam8255p Firmware, Qam8295p and 49 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while transmitting packet mapping information with invalid header payload size.
CVE-2025-20263 2026-06-17 N/A 8.6 HIGH
A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system.  This vulnerability is due to insufficient boundary checks for specific data that is provided to the web services interface of an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could cause the system to reload, resulting in a denial of service (DoS) condition.
CVE-2024-6381 1 Mongodb 1 Libbson 2026-06-17 N/A 4.0 MEDIUM
The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2
CVE-2024-58107 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.5 HIGH
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-57956 1 Huawei 1 Harmonyos 2026-06-17 N/A 2.8 LOW
Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56451 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.3 HIGH
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-55626 1 Oisf 1 Suricata 2026-06-17 N/A 3.3 LOW
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF filter file provided to Suricata at startup can lead to a buffer overflow at Suricata startup. The issue has been addressed in Suricata 7.0.8.
CVE-2024-48877 1 Wagner 1 Xls2csv 2026-06-17 N/A 8.4 HIGH
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2024-38422 1 Qualcomm 536 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 533 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVE-2024-37305 2026-06-17 N/A 8.2 HIGH
oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODE_UINT32 at the start of serialized hybrid (traditional + post-quantum) keys and signatures. Unchecked length values are later used for memory reads and writes; malformed input can lead to crashes or information leakage. Handling of plain/non-hybrid PQ key operation is not affected. This issue has been patched in in v0.6.1. All users are advised to upgrade. There are no workarounds for this issue.
CVE-2024-33078 1 Tencent 1 Libpag 2026-06-17 N/A 9.8 CRITICAL
Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution.
CVE-2024-2608 2 Debian, Mozilla 3 Debian Linux, Firefox, Thunderbird 2026-06-17 N/A 8.4 HIGH
`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVE-2024-28219 2 Debian, Python 2 Debian Linux, Pillow 2026-06-17 N/A 6.7 MEDIUM
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
CVE-2024-24478 1 Wireshark 1 Wireshark 2026-06-17 N/A 7.5 HIGH
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
CVE-2024-21470 1 Qualcomm 66 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 63 more 2026-06-17 N/A 8.4 HIGH
Memory corruption while allocating memory for graphics.
CVE-2024-21454 1 Qualcomm 6 Auto 4g Modem, Auto 4g Modem Firmware, Auto 5g Modem-rf and 3 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
CVE-2023-37536 3 Apache, Fedoraproject, Hcltech 3 Xerces-c\+\+, Fedora, Bigfix Platform 2026-06-17 N/A 8.2 HIGH
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
CVE-2023-33022 1 Qualcomm 424 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 421 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-33018 1 Qualcomm 526 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 523 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while using the UIM diag command to get the operators name.