CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft excel, 365 apps, 365 apps for enterprise +13 more +15 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2010 service pack 2 +6 more +8 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft chakracore, edge, edge (edgehtml-based) +2 moreScripting Engine Memory Corruption Vulnerability4.2 Medium
- microsoft edge, edge (chromium-based) +1 moreInternet Explorer Browser Helper Object (BHO) Memory Corruption Vulnerability4.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1709, windows 10 version 1709 for 32-bit systems +15 more +17 moreWindows Text Service Module Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows dnsrslvr.dll Elevation of Privilege Vulnerability7.8 High
- mi xiaomi ai speaker firmwareMemory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a...9.8 Critical
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...5.5 Medium
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- intel active management technology firmware, standard manageability, netapp steelstore cloud integrated storage +2 moreImproper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM...9.8 Critical
- accel-pppHeap buffer overflow in ACCEL-PPP8.2 High
- silk-v3-decoder project silk-v3-decoderThe decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check...9.8 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...4.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 moreu'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check to ensure that the TX read index & RX write index that are read from shared...5.5 Medium
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd()...9.8 Critical
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd...9.8 Critical
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd()...9.8 Critical
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities4.7 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities4.7 Medium
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software Buffer Overflow Vulnerability6.0 Medium
- tradingtechnologies trading technologies messagingA flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of...7.5 High
- dell emc isilon, emc powerscale onefs, isilon onefs +2 moreDell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer...5.3 Medium
- mz automation libiec61850Heap buffer overflow in libIEC618507.7 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- the xorg project xorg-x11-server, canonical ubuntu linux, x.org x server +2 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in...7.8 High
- sierrawireless aleosALEOS AT Command API Abuse4.1 Medium
- sysax multi serverWhen uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="...6.5 Medium
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +7 more +9 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability8.8 High
- microsoft access, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1909, windows 10 version 2004, windows 10 +2 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability5.5 Medium
- microsoft internet explorer, internet explorer 11, internet explorer 9 +2 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft edge, edge (edgehtml-based) +1 moreMicrosoft Edge Memory Corruption Vulnerability7.8 High
- microsoft edge, edge (edgehtml-based) +1 moreMicrosoft Edge PDF Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows Kernel Elevation of Privilege Vulnerability4.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreMicrosoft Graphics Components Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreMicrosoft Graphics Components Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +8 more +10 moreMicrosoft Windows Codecs Library Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreJet Database Engine Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +16 more +18 moreWindows WalletService Elevation of Privilege Vulnerability7.8 High
- microsoft edge, chakracore, edge (edgehtml-based) +2 moreScripting Engine Memory Corruption Vulnerability8.8 High
- Show moreLoading…