CVE-2025-25523

MEDIUM Year: 2025
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-120
View all →

Vulnerability Description

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.

Related Vulnerabilities

CVE-2017-18350

MEDIUM
CVSS:5.9(Medium)

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server res...

CWE-1202017

CVE-2023-3766

MEDIUM
CVSS:5.9(Medium)

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data recei...

CWE-1202023

CVE-2024-24456

MEDIUM
CVSS:5.9(Medium)

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer overflow.

CWE-1202024

CVE-2025-29032

MEDIUM
CVSS:5.9(Medium)

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

CWE-1202025

CVE-2016-7422

MEDIUM
CVSS:6.0(Medium)

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) v...

CWE-1202016

CVE-2016-8668

MEDIUM
CVSS:6.0(Medium)

The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by le...

CWE-1202016