CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote...8.8 High
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.5.5 Medium
- autodesk fbx reviewA user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer...7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability7.8 High
- saitoha libsixelLibsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at...6.5 Medium
- siemens simatic cp 343-1 (incl. siplus variants), simatic cp 343-1 advanced (incl. siplus variants), simatic cp 343-1 erpc +11 more +13 moreA vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions),...7.5 High
- gpacMemory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- gpacMemory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory...5.5 Medium
- gpacMemory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory...5.5 Medium
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021...6.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +105 more +107 morePossible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto...7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11...9.8 Critical
- apple ipados, tvos, watchos +2 more +4 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.5...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +95 more +97 morePossible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon...5.5 Medium
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute...7.8 High
- adobe after effectsAdobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...6.5 Medium
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service5.5 Medium
- adobe bridgeAdobe Bridge PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe media encoderAdobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- opcfoundation local discover server, siemens simatic net pc, simatic process historian opc ua server firmware +4 more +6 moreIn OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a...7.5 High
- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...6.5 Medium
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpacAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- apple ios and ipados, ipados, iphone os +2 moreApple iOS and iPadOS Buffer Overflow Vulnerability7.8 High
- adobe after effectsAdobe After Effects heap corruption vulnerability could lead to arbitrary code execution7.8 High
- exiv2An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers...6.5 Medium
- adobe illustratorAdobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- gpacMultiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpacMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- Show moreLoading…