CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mikrotik routerosMikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel...6.5 Medium
- mikrotik routerosMikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin...6.5 Medium
- mikrotik routerosMikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- google tensorflowOverflow/denial of service in `tf.raw_ops.ReverseSequence`2.5 Low
- google tensorflowHeap buffer overflow in `MaxPool3DGradGrad`2.5 Low
- google tensorflowHeap buffer overflow in `AvgPool3DGrad`2.5 Low
- google tensorflowHeap buffer overflow in `FractionalAvgPoolGrad`2.5 Low
- google tensorflowHeap buffer overflow in `MaxPoolGrad`2.5 Low
- hilscher rcx rtos, pepperl+fuchs ethernet io modules ice1-16, ethernet io modules ice1-8 +8 more +10 moreHilscher rcX RTOS: Wrong handling of the UDP checksum8.6 High
- postgresql, redhat enterprise linux, jboss enterprise application platform +1 more +3 moreA flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17...8.8 High
- siemens tecnomatix plant simulationA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The...7.8 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- microsoft internet explorer 11, internet explorer 9, internet explorer +2 moreScripting Engine Memory Corruption Vulnerability7.5 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF RINGBUF map oversized allocation7.8 High
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the...6.5 Medium
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU:...7.8 High
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU:...7.8 High
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU:...7.8 High
- openscadAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of...8.8 High
- foxit reader, foxitsoftware 3d +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 moreOut of bound write can occur in TZ command handler due to lack of validation of command ID in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 moreOut of bound write can occur in playready while processing command due to lack of input...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 moreLocked memory can be unlocked and modified by non secure boot loader through improper system call...8.4 High
- qemu, debian linux, redhat enterprise linux +2 moreA heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It...6.1 Medium
- getdata project getdata, debian linux, fedoraproject fedora +2 moreA heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when...9.8 Critical
- cisco video surveillance 8000 series ip cameras, video surveillance 8000p firmware, video surveillance 8020 firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service Vulnerability6.5 Medium
- cisco sd-wan vedge router, vedge 1000 firmware, vedge 100 firmware +6 more +8 moreCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities7.5 High
- cisco sd-wan vedge router, vedge 1000 firmware, vedge 100 firmware +6 more +8 moreCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities7.5 High
- cisco sd-wan vedge router, vedge 1000 firmware, vedge 100 firmware +6 more +8 moreCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities7.5 High
- eximExim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers...9.8 Critical
- eximExim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory...9.8 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during...9.8 Critical
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in...6.5 Medium
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument...7.8 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability8.6 High
- gnu binutilsA flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote...8.8 High
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...8.8 High
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...6.5 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +5 more +7 moreA vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions...8.1 High
- siemens solid edge se2020, solid edge se2021 +1 moreA vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets7.5 High
- jhead project jheadA heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when...7.8 High
- gstreamer, debian linux, redhat enterprise linux +2 moreGStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.7.8 High
- Show moreLoading…