CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- gpacThe gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file...5.5 Medium
- gpacMemory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- autodesk fbx reviewA Memory Corruption Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code...7.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed...8.8 High
- tendacn g0 firmware, g1 firmware, g3 firmware +2 moreCommand Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5...9.8 Critical
- tendacn g1 firmware, g3 firmware +1 moreCommand Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15...9.8 Critical
- microsoft outlook, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Outlook Memory Corruption Vulnerability7.1 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft...9.8 Critical
- rust-lang rustIn the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is...7.5 High
- rust-lang rustIn the standard library in Rust before 1.49.0, String::retain() function has a panic safety...7.5 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation calls...7.5 High
- rust-lang rustIn the standard library in Rust before 1.51.0, the Zip implementation calls...7.5 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue....5.3 Medium
- exiv2, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation...6.5 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities5.3 Medium
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities5.3 Medium
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability9.8 Critical
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- apple ipados, macos, safari +5 more +7 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4...8.8 High
- apple ipados, macos, ios and ipados +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2,...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue existed in the processing of font files. This issue was addressed with...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, tvos, watchos +3 more +5 moreA memory corruption issue existed in the processing of font files. This issue was addressed with...7.8 High
- apple macos, tvos, watchos +3 more +5 moreA memory corruption issue existed in the processing of font files. This issue was addressed with...7.8 High
- apple icloud, ipados, macos +5 more +7 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue existed in the processing of font files. This issue was addressed with...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macosA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- f5 big-ip, big-ip traffic management microkernel, big-ip access policy manager +13 more +15 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...9.8 Critical
- redisA heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0...5.3 Medium
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +2 moreA flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in...5.5 Medium
- upxA flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause...6.6 Medium
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: buffer overflow7.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed...8.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability7.4 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability8.1 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 High
- mozilla firefoxBy causing a transition on a parent node by removing a CSS rule, an invalid property for a marker...6.5 Medium
- Show moreLoading…