CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- toyota global techstream, toyota motor corporation global techstream (gts) for toyota dealers +1 moreGlobal TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to...7.8 High
- artifex ghostscript, canonical ubuntu linux, opensuse leap +2 moreA memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard...9.8 Critical
- microsoft windows 10 version 1709 for 32-bit systems, windows 10 version 1709 for arm64-based systems, windows 10 version 1709 for x64-based systems +16 more +18 moreA remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library...7.8 High
- microsoft windows 10 version 1709 for 32-bit systems, windows 10 version 1709 for arm64-based systems, windows 10 version 1709 for x64-based systems +16 more +18 moreA remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library...7.8 High
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk View SE7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an...8.8 High
- cisco rv110w wireless-n vpn firewall firmware, rv215w wireless-n vpn router firmware +1 moreCisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability9.8 Critical
- cisco small business rv series router firmware, rv110w wireless-n vpn firewall firmware, rv130 vpn router firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability9.8 Critical
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w wireless-n vpn firewall firmware, rv130 firmware +2 more +4 moreCisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities8.8 High
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities8.8 High
- torproject torTor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service ...7.5 High
- microsoft word, office, office online server +4 more +6 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...8.8 High
- microsoft word, 365 apps, 365 apps for enterprise for 32-bit systems +7 more +9 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...8.8 High
- microsoft word, 365 apps, 365 apps for enterprise for 32-bit systems +7 more +9 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists in the way that the Windows Graphics Device...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreAn information disclosure vulnerability exists when the Windows kernel fails to properly...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle...8.8 High
- microsoft office, windows, windows 10 version 1903 for 32-bit systems +20 more +22 moreA remote code execution vulnerability exists in the way that DirectWrite handles objects in...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems, internet explorer 11 on windows 10 version 1903 for arm64-based systems +10 more +12 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists in the Windows Remote Desktop Client when a user...7.5 High
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +11 more +13 moreA remote code execution vulnerability exists when the Windows Font Driver Host improperly handles...7.8 High
- microsoft windows, windows server, windows server, version 1903 (server core installation) +6 more +8 moreA remote code execution vulnerability exists in Windows Domain Name System servers when they fail...10.0 Critical
- microsoft 365 apps, 365 apps for enterprise for 32-bit systems, 365 apps for enterprise for 64-bit systems +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 High
- microsoft outlook, 365 apps, 365 apps for enterprise for 32-bit systems +2 more +4 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- huawei ar120-s, ar120-s firmware, ar1200 +97 more +99 moreThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...7.5 High
- riot-os riotRIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode()...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets)...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an...5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor...6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...6.5 Medium
- ozone project ozoneDrop of uninitialized memory in Ozone9.8 Critical
- ozone project ozoneOut of bounds read in Ozone9.8 Critical
- veeam availability suite, backup \& replication +1 moreVeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has...8.8 High
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via...6.7 Medium
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software...7.8 High
- adobe illustratorAdobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustratorAdobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe bridgeAdobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability....7.8 High
- crossbeam-channel project crossbeam-channelIncorrect buffer size in crossbeam-channel5.5 Medium
- Show moreLoading…