CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...9.8 Critical
- freebsdIn FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before...9.1 Critical
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +14 more +16 moreOut of bound memory access while processing TZ command handler due to improper input validation...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, msm8996au firmware +10 more +12 moreWhile handling the vendor command there is an integer truncation issue that could yield a buffer...7.8 High
- cisco wireless lan controller (wlc), 5508 wireless controller firmware, 5520 wireless controller firmware +2 moreCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability8.6 High
- cisco webex network recording player, webex meetings, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability7.8 High
- intel proset\/wireless wifi, intel corporation intel(r) proset/wireless wifi software +1 moreImproper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products...6.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists in Microsoft Office software when the software fails...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft word, office, office online server +4 more +6 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...7.8 High
- microsoft office 365 proplusA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- microsoft chakracore, edge, edge (edgehtml-based) on windows 10 for 32-bit systems +20 more +22 moreChakraCore RCE Vulnerability7.5 High
- microsoft internet explorer, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +7 more +9 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...8.8 High
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists in the way that the Windows Graphics Device...8.8 High
- microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver...7.8 High
- microsoft windows, windows server, windows 7 +1 more +3 moreAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for x64-based systems, windows 10 version 1909 for x64-based systems +6 more +8 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...8.4 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle...7.8 High
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreBuffer overwrite in ENS allowed to bypass AMSI protection6.1 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...8.8 High
- mozilla firefox esrA malicious Android application could craft an Intent that would have been processed by Firefox...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets)...9.8 Critical
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in Netty7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890,...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating...9.8 Critical
- Show moreLoading…