CWE-119
CVEs classified under CWE-119, newest first.
883 CVEsRSS
CVE-2025-5555High· 7.8A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1
A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local ac…
CVE-2025-11840Low· 3.3PoCA weakness has been identified in GNU Binutils 2.45
A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been…
CVE-2025-55089Critical· 9.8In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk driver
In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk driver. It could cause a remote execurtion after receiving a crafted sequence of packets
CVE-2025-11683Medium· 6.5YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to…
YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to…
CVE-2025-33044High· 7.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption an…
CVE-2025-11653High· 8.8A vulnerability was determined in UTT HiPER 2620G up to 3.1.4
A vulnerability was determined in UTT HiPER 2620G up to 3.1.4. Impacted is the function strcpy of the file /goform/fNTP. This manipulation of the argument NTPServerIP causes buffer overflow. It is possible to initiate the attack remotely…
CVE-2025-11652High· 8.8A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313
A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. This issue affects some unknown processing of the file /goform/formTaskEdit_ap. The manipulation of the argument txtMin2 results in buffer overflow. The attack may be…
CVE-2025-11651High· 8.8A vulnerability has been found in UTT 进取 518G up to V3v3.2.7-210919-161313
A vulnerability has been found in UTT 进取 518G up to V3v3.2.7-210919-161313. This vulnerability affects the function sub_4247AC of the file /goform/formRemoteControl. The manipulation of the argument Profile leads to buffer overflow. The …
CVE-2025-11586High· 8.8A vulnerability was determined in Tenda AC7 15.03.06.44
A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be ca…
CVE-2025-11549High· 8.8A vulnerability has been found in Tenda W12 3.0.0.6(3948)
A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based…
CVE-2025-11528High· 8.8A vulnerability was identified in Tenda AC7 15.03.06.44
A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation of the argument enable leads to stack-based buffer overflow. Remote exploitation of the attack is…
CVE-2025-11527High· 8.8A vulnerability was determined in Tenda AC7 15.03.06.44
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a manipulation of the argument Password can lead to stack-based buffer overflow. T…
CVE-2025-11526High· 8.8A vulnerability was found in Tenda AC7 15.03.06.44
A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifi_chkHz results in stack-based buffer overflow. The attack…
CVE-2025-11525High· 8.8A vulnerability has been found in Tenda AC7 15.03.06.44
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. …
CVE-2025-11524High· 8.8A flaw has been found in Tenda AC7 15.03.06.44
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely.…
CVE-2025-11444High· 8.8A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argu…
CVE-2025-11423Critical· 9.8A vulnerability was found in Tenda CH22 1.0.0.1
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be…
CVE-2025-11418Critical· 9.8A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_…
CVE-2025-11495Low· 3.3PoCA vulnerability was determined in GNU Binutils 2.45
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can…
CVE-2025-11494Low· 3.3PoCA vulnerability was found in GNU Binutils 2.45
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approach…
CVE-2025-36156High· 7.4IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could ove…
CVE-2025-11389High· 8.8A security flaw has been discovered in Tenda AC15 15.03.05.18
A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation …
CVE-2025-11388High· 8.8A vulnerability was identified in Tenda AC15 15.03.05.18
A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched r…
CVE-2025-11387High· 8.8A vulnerability was determined in Tenda AC15 15.03.05.18
A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initi…
CVE-2025-11386High· 8.8A vulnerability was found in Tenda AC15 15.03.05.18
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffe…
CVE-2025-11385High· 8.8A vulnerability has been found in Tenda AC20 up to 16.03.08.12
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to buffer overflow. The attack can be …
CVE-2025-11356High· 8.8A vulnerability was found in Tenda AC23 up to 16.03.07.52
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch th…
CVE-2025-11355High· 8.8A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710
A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710. Affected by this vulnerability is the function strcpy of the file /goform/aspChangeChannel. The manipulation of the argument pvid leads to buffer overflow. It is possibl…
CVE-2025-11414Low· 3.3PoCA vulnerability was determined in GNU Binutils 2.45
A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only b…
CVE-2025-11413Low· 3.3PoCA vulnerability was found in GNU Binutils 2.45
A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached loc…