CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, microsoft edge chromium +1 moreInsufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote...8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm pm3003a firmware, pm8009 firmware +37 more +39 moreOut of bound access issue while handling cvp process control command due to improper validation...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000, pm3003a +156 more +158 moreOut of bound access in computer vision control due to improper validation of command length...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000, ar8031 +278 more +280 moreOut of bound memory access in camera driver due to improper validation on data coming from UMD...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053, apq8096au +291 more +293 moreOut of bound access due to usage of an out-of-range pointer offset in the camera driver. in...6.7 Medium
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Buffer Overflow Vulnerabilities9.8 Critical
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Buffer Overflow Vulnerabilities9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets7.4 High
- huawei emui, magic ui +1 moreThere is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone...9.8 Critical
- cisco video surveillance 8000 series ip cameras, video surveillance 8000p ip camera firmware, video surveillance 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...4.3 Medium
- rockwellautomation rslinxA denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell...7.5 High
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function...9.8 Critical
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff...7.8 High
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are...6.5 Medium
- google asyloAn arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to...5.3 Medium
- pixar openusd, apple macos +1 moreAn out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05...8.8 High
- schneider-electric modicon m258 firmware, somachine, somachine motion +2 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...6.8 Medium
- async-coap project async-coapData races in async-coap8.1 High
- tiny future project futureData race in tiny_future8.1 High
- pixar openusd, apple mac os x, macos +2 moreAn out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS...6.3 Medium
- pixar openusdAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded...4.3 Medium
- pixar openusdAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded...4.3 Medium
- the xorg project xorg-x11-server, x.org x server +1 moreA flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the...7.8 High
- debian linux, linux kernel, netapp aff a250 firmware +9 more +11 moreCVE-2020-27815 affecting package kernel for versions less than 5.15.135.1-27.8 High
- nanopbMemory leak in nanopb7.5 High
- project convecData races in convec8.1 High
- conqueue project conqueueData race in conqueue8.1 High
- saitoha libsixelUnverified indexs into the array lead to out of bound access in the gif_out_code function in...6.5 Medium
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- cisco integrated management controller, unified computing system (standalone), enterprise nfv infrastructure software +2 moreCisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities9.8 Critical
- ticketed lock project lockData races in ticketed_lock8.1 High
- ruspiro-singleton project ruspiro-singletonData race in ruspiro-singleton8.1 High
- Show moreLoading…