CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- adobe preludeAdobe Prelude M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- adobe preludeAdobe Prelude M4A file memory corruption vulnerability could lead to remote code execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe bridge, media encoder +1 moreAdobe Bridge Use After Free could lead to Arbitrary code execution7.8 High
- adobe media encoderAdobe Media Encoder memory corruption vulnerability could lead to remote code execution7.8 High
- adobe bridge, media encoder +1 moreAdobe Bridge Memory Corruption could lead to Arbitrary code execution7.8 High
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +94 more +96 moreInsufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses...5.5 Medium
- asus p453uj biosASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer6.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...7.8 High
- red hat httpd, redhat enterprise linux +1 moreMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 Critical
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, apogee modular building controller firmware +9 more +11 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...7.1 High
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, apogee modular building controller firmware +9 more +11 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...6.5 Medium
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 High
- opensc, fedoraproject fedora +1 moreStack buffer overflow issues were found in Opensc before version 0.22.0 in various places that...5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...5.3 Medium
- apple ipados, tvos, watchos +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a...7.8 High
- huawei emui, magic ui +1 moreThere is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation...9.8 Critical
- huawei emui, magic ui +1 moreThere is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this...9.8 Critical
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +8 more +10 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, firepower management center virtual appliance, secure firewall threat defense +1 more +3 moreCisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability8.6 High
- codesys, codesys v2, plcwinnt +28 more +30 moreCODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service8.1 High
- teamviewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- auvesy versiondogAUVESY Versiondog8.0 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8031 firmware, csra6620 firmware +75 more +77 morePossible out of bound memory access due to improper boundary check while creating HSYNC fence in...8.4 High
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreUse of Out-of-range Pointer Offset in bfabiszewski/libmobi7.1 High
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreUse of Out-of-range Pointer Offset in bfabiszewski/libmobi7.1 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- crypto2 project crypto2Use of a Broken or Risky Cryptographic Algorithm in crypto29.8 Critical
- samsung notesLack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung...4.0 Medium
- vyperlang vyperMemory corruption in Vyper7.5 High
- google androidIn VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a...7.8 High
- adobe premiere, premiere pro +1 moreAdobe Premiere Pro 2021 SVG File Parsing Leads to Memory Corruption7.8 High
- adobe premiere, premiere pro +1 moreAdobe Premiere Pro 2021 EXR File Parsing Leads to Memory Corruption7.8 High
- adobe framemakerAdobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe framemakerAdobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe premiere elements, not a product +1 moreAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe incopyAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe incopyAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- mozilla firefox esr, thunderbird +1 moreMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 High
- Show moreLoading…