Search Results (4236 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-37050 1 M.j.m 1 Quick Player 2026-02-03 9.8 Critical
Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading mechanism, potentially enabling remote code execution.
CVE-2020-37036 1 Mini-stream 2 Mini-stream Rm Downloader, Rm Downloader 2026-02-03 8.4 High
RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching calc.exe.
CVE-2020-37040 1 Codeblocks 1 Code::blocks 2026-02-03 8.4 High
Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.
CVE-2025-13151 1 Gnu 1 Libtasn1 2026-02-02 7.5 High
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
CVE-2023-54328 1 Aimonesoft 1 Aimone Video Converter 2026-02-02 6.5 Medium
AimOne Video Converter 2.04 Build 103 contains a buffer overflow vulnerability in its registration form that causes application crashes. Attackers can generate a 7000-byte payload to trigger the denial of service and potentially exploit the software's registration mechanism.
CVE-2025-59947 1 Emqx 1 Nanomq 2026-01-30 9.0 Critical
NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription.
CVE-2020-36995 1 Telnet-lite 1 Mocha Telnet Lite 2026-01-30 7.5 High
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.
CVE-2020-37010 1 Bearshare 1 Bearshare Lite 2026-01-30 9.8 Critical
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.
CVE-2020-36940 1 Tucows 1 Easy Cd & Dvd Cover Creator 2026-01-29 9.8 Critical
Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash.
CVE-2025-14187 1 Ugreen 1 Dh2100+ 2026-01-28 7.2 High
A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. Executing a manipulation of the argument path can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. It is recommended to upgrade the affected component.
CVE-2025-47334 1 Qualcomm 293 Csra6620, Csra6620 Firmware, Csra6640 and 290 more 2026-01-27 6.7 Medium
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47335 1 Qualcomm 91 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 88 more 2026-01-27 6.7 Medium
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2026-24823 1 Fastshift 1 X-track 2026-01-27 N/A
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C. This issue affects X-TRACK: through v2.7.
CVE-2026-24799 1 Davisking 1 Dlib 2026-01-27 N/A
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking dlib (dlib/external/zlib modules). This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9.
CVE-2026-24810 1 Rethinkdb 1 Rethinkdb 2026-01-27 N/A
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb (src/cjson modules). This vulnerability is associated with program files cJSON.Cc. This issue affects rethinkdb: through v2.4.4.
CVE-2026-24800 1 Tildearrow 1 Furnace 2026-01-27 N/A
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.
CVE-2026-24344 1 Actions-micro 2 Ezcast Pro Ii, Ezcast Pro Ii Firmware 2026-01-27 N/A
Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution
CVE-2025-47321 1 Qualcomm 231 Ar8031, Ar8031 Firmware, Ar8035 and 228 more 2026-01-27 7.8 High
Memory corruption while copying packets received from unix clients.
CVE-2025-47388 1 Qualcomm 91 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 88 more 2026-01-27 7.8 High
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47394 1 Qualcomm 91 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 88 more 2026-01-27 7.8 High
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.