CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft edge, edge (edgehtml-based) +1 moreMicrosoft Edge PDF Remote Code Execution Vulnerability4.2 Medium
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreVBScript Remote Code Execution Vulnerability7.5 High
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreInternet Explorer Memory Corruption Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +23 more +25 moreWindows Denial of Service Vulnerability5.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreWindows Remote Code Execution Vulnerability7.8 High
- microsoft chakracore, edge, edge (edgehtml-based) +2 moreScripting Engine Memory Corruption Vulnerability4.2 Medium
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreInternet Explorer Memory Corruption Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreMicrosoft Script Runtime Remote Code Execution Vulnerability7.5 High
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreVBScript Remote Code Execution Vulnerability7.5 High
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreVBScript Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreVBScript Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1709 for 32-bit systems +14 more +16 moreMedia Foundation Memory Corruption Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, excel 2010 service pack 2 +6 more +8 moreMicrosoft Excel Remote Code Execution Vulnerability9.8 Critical
- rockwellautomation eds subsystem, rslinx, rslinx enterprise +2 more +4 moreProducts that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously...5.5 Medium
- cherokee-project cherokeeIn Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker...7.5 High
- naviserver project naviserverNaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode...7.5 High
- google androidAirbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow...9.8 Critical
- google androidIn a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to...9.8 Critical
- apache cloudstackA buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack....9.8 Critical
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- freebsdIn FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the...9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP2.2 Low
- zephyrproject zephyrUpdateHub Might Dereference An Uninitialized Pointer8.0 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The...7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.7.8 High
- nvidia display driver, graphics drivers +1 moreHeap overflow in control device ioctl5.0 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP5.5 Medium
- cisco asa 5505 firmware, asa 5510 firmware, asa 5512-x firmware +11 more +13 moreCisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability8.6 High
- cisco firepower device manager on-box, firepower threat defense software +1 moreCisco Firepower Device Manager On-Box Software XML Parsing Vulnerability5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Critical
- google earth, google llc earth pro +1 moreBuffer Overflow in Google Earth Pro4.2 Medium
- zte zenic one r22bZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is...5.5 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 moreIn versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and...6.7 Medium
- Show moreLoading…