CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreThe affected product is vulnerable to memory corruption condition due to lack of proper...7.8 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a...7.5 High
- qemu, debian linux +1 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs...6.5 Medium
- torproject torAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service...7.5 High
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker...5.5 Medium
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An...5.5 Medium
- dell poweredge bios intel 15g, poweredge c4140 firmware, poweredge c6420 firmware +29 more +31 moreDell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array...8.1 High
- accusoft imagegearA memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft...8.1 High
- accusoft imagegearAn improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack...9.8 Critical
- schneider-electric interactive graphical scada systemA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior...9.0 Critical
- intel nuc 10 performance kit nuc10i3fnh firmware, nuc 10 performance kit nuc10i3fnhf firmware, nuc 10 performance kit nuc10i3fnk firmware +74 more +76 moreImproper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged...6.7 Medium
- intel converged security and manageability engine, netapp cloud backup, siemens simatic field pg m5 firmware +11 more +13 moreImproper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12...6.7 Medium
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9580 firmware +24 more +26 moreMemory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in...8.8 High
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9580 firmware +24 more +26 moreMemory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in...8.8 High
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9580 firmware +24 more +26 moreMemory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in...8.8 High
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9580 firmware +24 more +26 moreMemory corruption due to lack of check of validation of pointer to buffer passed to trustzone in...8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 moreWindows MSHTML Platform Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +10 more +12 moreWindows Hyper-V Denial of Service Vulnerability8.6 High
- academysoftwarefoundation openexr, fedoraproject fedora +1 moreA heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...8.8 High
- dimforge nalgebraOut of bounds write in nalgebra9.8 Critical
- cisco webex player, webex meetings +1 moreCisco Webex Player Memory Corruption Vulnerability5.3 Medium
- cisco webex player, webex meetings +1 moreCisco Webex Player Memory Corruption Vulnerability7.8 High
- cisco webex player, webex meetings, webex meetings server +2 moreCisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability7.8 High
- cisco webex network recording player, webex meetings, webex meetings desktop +3 more +5 moreCisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability7.8 High
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful...7.8 High
- libtpms project libtpms, redhat enterprise linux +1 moreA stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while...5.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...8.8 High
- google androidIn iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user...7.8 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +12 more +14 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...9.8 Critical
- ivanti connect secure, pulse connect secure +1 moreA buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote...8.8 High
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to...7.8 High
- podofoA flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base:...7.8 High
- fig2dev project fig2dev, debian linux, fedoraproject fedora +2 moreAn Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects()...7.1 High
- gnu binutilsAn out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could...7.1 High
- schneider-electric ecostruxure machine expert, vijeo designer +1 moreImproper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that...7.8 High
- debian linux, fedoraproject fedora, linux kernel +10 more +12 moreImproper memory handling in Linux KVM8.7 High
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead...7.8 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient7.4 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It...6.5 Medium
- xenx86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest...5.5 Medium
- mitsubishi gs21 firmware, gt21 firmware, gt23 firmware +3 more +5 moreBuffer access with incorrect length value vulnerability in GOT2000 series GT27 model...7.5 High
- mikrotik routerosMikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process...6.5 Medium
- Show moreLoading…