CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...5.7 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009 firmware, apq8053 firmware +18 more +20 moreInteger overflow in boot due to improper length check on arguments received in Snapdragon...6.8 Medium
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric ion7650 firmware, powerlogic ion7300 firmware, powerlogic ion7550 firmware +8 more +10 moreA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability...7.5 High
- schneider-electric powerlogic ion7400 firmware, powerlogic ion9000 firmware, powerlogic pm8000 firmware +2 moreA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +18 more +20 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft internet explorer, edge, internet explorer 11 +2 more +4 moreInternet Explorer Memory Corruption Vulnerability8.8 High
- facebook hhvmThe unserialize() function supported a type code, "S", which was meant to be supported only for...7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed...7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of...7.8 High
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreIn LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead...5.5 Medium
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF...5.5 Medium
- quinn project quinnquinn invalidly assumes the memory layout of std::net::SocketAddr7.5 High
- byte struct project structDeserializing an array can free uninitialized memory in byte_struct9.8 Critical
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreStack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ...9.0 Critical
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed...8.8 High
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...5.5 Medium
- matroska libebml, debian linux, fedoraproject fedora +2 moreA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of...6.5 Medium
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +227 more +229 morePossible out of bound access in TA while processing a command from NS side due to improper length...7.8 High
- mitsubishi electric corporation cpu module logging configuration tool, cw configurator, data transfer +47 more +49 moreImproper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA...7.5 High
- intel graphics driversUntrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15...5.5 Medium
- intel bmc firmwareBuffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute...6.7 Medium
- intel graphics driversUntrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may...5.5 Medium
- intel xmm 7360 firmwareImproper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370...7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw...3.3 Low
- nb-connect project nb-connectnb-connect invalidly assumes the memory layout of std::net::SocketAddr9.8 Critical
- tencent wechatThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of...9.8 Critical
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization...7.8 High
- sthttpd project sthttpdAn issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is...7.5 High
- moxa edr-810-2gsfp-t firmware, edr-810-2gsfp firmware, edr-810-vpn-2gsfp-t firmware +5 more +7 moreCertain Moxa Inc products are affected by an improper restriction of operations in EDR-G903...9.8 Critical
- google androidIn SystemSettingsValidators, there is a possible permanent denial of service due to missing...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +133 more +135 moreAn Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple...6.8 Medium
- outer cgi project cgiUninitialized memory access in outer_cgi9.8 Critical
- d-link dir-825 r1 devices, dlink dir-825 r1 firmware +1 moreAn issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer...9.8 Critical
- google chrome, microsoft edge +1 moreUninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to...6.8 Medium
- Show moreLoading…