CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- disc-soft daemon toolsA VULNERABILITY_CLASS vulnerability exists in the FEATURE functionality of Disc Soft Ltd Deamon...8.1 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...4.4 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreBootloader contains a vulnerability in the NV3P server where any user with physical access...6.7 Medium
- nvidia jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx, jetson nano, jetson nano 2gb, jetson tx1, jetson linux, shield tv +1 more +3 moreNVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption...9.8 Critical
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers...4.4 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...8.8 High
- insyde kernel, tianocore edk ii, edk2 +2 moreNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.8.1 High
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morenet/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of...7.5 High
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful...9.8 Critical
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful...9.8 Critical
- powerdns authoritative serverPowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- cisco ip phone 8800 firmware, ip phone 8800 series with multiplatform firmware, ip phone 8811 firmware +12 more +14 moreThe TrustZone implementation in certain Broadcom MediaxChange firmware could allow an...6.8 Medium
- sam2p project sam2pThere is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49...7.8 High
- qemu, redhat enterprise linux +1 moreA stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A...6.5 Medium
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...6.1 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the...6.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +25 more +27 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreImproper length check of public exponent in RSA import key function could cause memory corruption...8.4 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreAn out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in...7.8 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality...9.8 Critical
- realtek hda driverRealtek High definition audio Windows driver crashed6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- linuxptp project linuxptp, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a...7.1 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...8.8 High
- php, netapp clustered data ontap +1 moreMultiple vulnerabilities in Firebird client extension5.0 Medium
- jtekt 2port-efr firmware, fl\/et-t-v2h firmware, nano 10gx firmware +19 more +21 moreWhen JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2,...7.5 High
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful...9.8 Critical
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful...7.5 High
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful...7.5 High
- huawei emui, magic ui +1 moreThere is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these...9.8 Critical
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreTrusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is...7.7 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreTrusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is...7.7 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreTrusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is...7.7 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreTrusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is...7.7 High
- fatek winproladderFATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within...9.8 Critical
- Show moreLoading…