CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- crossbeam-rs crossbeamUndefined Behavior in bounded Crossbeam channel8.1 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...7.8 High
- adobe illustratorAdobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful...7.8 High
- apache traffic server, debian linux +1 moreApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to...7.5 High
- winmagic securedocThe SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to...7.8 High
- kjur jsrsasign, netapp max data +1 moreRSA-PSS signature validation vulnerability by prepending zeros in jsrsasign9.8 Critical
- kjur jsrsasign, netapp max data +1 moreRSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +32 more +34 morePayload size is not validated before reading memory that may cause issue of accessing invalid...5.5 Medium
- arm mbed osBuffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...9.1 Critical
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities7.2 High
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities7.2 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds...5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of...5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds...5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a...7.5 High
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter...9.1 Critical
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.10.0 Critical
- google androidIn crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use...9.8 Critical
- jerryscriptAn issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0....7.5 High
- intel converged security management engine firmwareImproper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14...7.8 High
- lenovo bios, intel core i5-7200u firmware, core i5-7260u firmware +77 more +79 moreImproper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core...7.8 High
- rgb-rust project rgb-rustOut of bounds access in rgb9.1 Critical
- adobe framemakerAdobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful...8.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with...7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general...7.5 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...9.8 Critical
- google androidIn setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing...8.8 High
- ibm aspera application platform on demand, aspera faspex on demand, aspera high-speed transfer endpoint +8 more +10 moreCertain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the...7.5 High
- microsoft office, 365 apps, 365 apps for enterprise for 32-bit systems +1 more +3 moreA remote code execution vulnerability exists in Microsoft Office software when it fails to...8.8 High
- Show moreLoading…