Threats Tagged 'cwe-120'

A buffer overflow vulnerability exists in WatchGuard Fireware OS that could allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. The affected versions range from 11.9.6 through 12.10.3. This vulnerability has a high severity score of 7.2 and impacts confidentiality, integrity, and availability of the system.

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3.

A buffer overflow vulnerability exists in open62541 version 1.5.5 that allows a remote attacker to cause a denial of service. The issue arises from improper validation of input arguments in the Service_Call function against runtime-resolved InputArguments metadata.

A buffer overflow vulnerability exists in Systerel S2OPC version 1.7.3 that allows a remote attacker to cause a denial of service. The flaw is triggered via the AddNodes function involving the address_space_bs.c, sopc_node_mgt_helper_internal.c, and toolkit_test_server components. This vulnerability does not impact confidentiality or integrity but can disrupt availability.

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Memory Corruption when processing registry values with incorrect types using a direct query method.

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-11885 is a high-severity buffer overflow vulnerability in IBM PowerVM Hypervisor versions FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1. A specially crafted OS hypervisor call can cause the hypervisor to crash or compromise OS memory integrity. This vulnerability is classified as CWE-120, indicating a classic buffer copy without checking the size of input. The vulnerability has a CVSS 3.1 score of 8.4, reflecting high impact on integrity and availability with low attack complexity and limited privileges required. No patch or official remediation information is currently available, and no known exploits are reported in the wild.

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single text-encoded H.248/Megaco message containing an oversized property parm name. When tokenizing a Local/Remote descriptor, mfs_load_property_groups extracts the attacker-controlled property name (bounded only by the message length) and, when no value follows, formats it into a fixed 512-byte error_msg field of the MfsErlDrvData struct using an unchecked sprintf call. Names longer than roughly 452 bytes overflow into the immediately following struct fields (text_buf, text_ptr, term_spec, term_spec_size, term_spec_index), overwriting live pointers and counters with attacker-chosen bytes. Subsequent scanner code writes and frees through the corrupted pointers, producing arbitrary write and arbitrary free primitives inside the BEAM VM process, which can be leveraged for remote code execution. On builds compiled with _FORTIFY_SOURCE the overflow is detected at runtime and terminates the process with SIGABRT, resulting in denial of service. The overflow occurs in the flex scanner before any grammar or Megaco-level authentication processing, so exploitation requires only network reachability to the megaco transport port on a node configured with {scanner, flex}. This vulnerability is associated with program files lib/megaco/src/flex/megaco_flex_scanner_drv.flex.src and program routines mfs_load_property_groups. This issue affects OTP from OTP 17.0 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to megaco from 3.17.1 before 4.9.1, 4.8.3.1 and 4.7.2.2. Versions prior to OTP 17.0 are also affected but are not listed because the OTP version scheme is only defined from OTP 17.0 onwards.