CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +14 more +16 moreA denial of service vulnerability exists when Windows improperly handles objects in memory, aka ...6.5 Medium
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +11 more +13 moreA remote code execution vulnerability exists in the way that the Windows Graphics Device...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +13 more +15 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise for 32-bit systems +2 more +4 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- microsoft excel, 365 apps, 365 apps for enterprise for 32-bit systems +2 more +4 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- microsoft chakracore, edge, internet explorer 11 +35 more +37 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +10 more +12 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft chakracore, edge, edge (edgehtml-based) on windows 10 for 32-bit systems +20 more +22 moreChakraCore RCE Vulnerability8.1 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3...6.8 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An...5.3 Medium
- apple macos, mac os x +1 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...7.8 High
- apple ios, ipados, watchos +4 more +6 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...4.3 Medium
- apple ios, ipados, macos +4 more +6 moreA logic issue existed resulting in memory corruption. This was addressed with improved state...7.8 High
- apple ios, ipados, macos +4 more +6 moreA logic issue existed resulting in memory corruption. This was addressed with improved state...7.8 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...7.1 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5...8.8 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- netapp active iq unified manager, oncommand insight, oncommand workflow automation +6 more +8 morenapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 High
- zephyrproject zephyrError handling invalid packet sequence8.1 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets)...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...7.8 High
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities9.8 Critical
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities8.1 High
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 morePossibility of out of bound access while processing the responses from video firmware in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +8 more +10 moreOut of bound memory access while processing qpay due to not validating length of the response...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +34 more +36 moreOut of bound memory access while processing ese transmit command due to passing Response buffer...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 Medium
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed...8.8 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware...3.3 Low
- cisco amp for endpoints, advanced malware protection for endpoints +1 moreCisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability5.5 Medium
- cisco amp for endpoints, advanced malware protection for endpoints +1 moreCisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreMicrosoft Graphics Components Remote Code Execution Vulnerability7.8 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 r2 service pack 1 +2 more +4 moreMedia Foundation Memory Corruption Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +20 more +22 moreMedia Foundation Memory Corruption Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1709 for 32-bit systems +14 more +16 moreMedia Foundation Memory Corruption Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1709 for 32-bit systems +14 more +16 moreMicrosoft Color Management Remote Code Execution Vulnerability8.8 High
- Show moreLoading…