CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal...5.5 Medium
- google android, mediatek, inc. mt6739, mt6768, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This...5.5 Medium
- google android, mediatek, inc. mt6595, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8768 +1 moreIn libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check....5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +101 more +103 morePossible buffer overflow due to lack of range check while processing a DIAG command for COEX...7.8 High
- google androidIn gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory...5.5 Medium
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- gerbv, debian linux +1 moreAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling...10.0 Critical
- gpacAn invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf...5.5 Medium
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address...5.5 Medium
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- apache plc4xApache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response8.8 High
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- matrix element, olm, schildi schildichat +3 more +5 moreThe olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer...9.8 Critical
- siemens jt utilities, jttk, jt open toolkit +2 moreA vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- google android, samsung mobile devices +1 moreAn improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows...6.4 Medium
- aomediaAOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86...6.5 Medium
- adobe incopyAdobe InCopy GIF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude MXF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude SVG File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe preludeAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...8.8 High
- adobe animateAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe animateAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe animateAdobe Animate Memory Corruption Could Lead To Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects MXF File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects SGI File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects SVG File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution7.8 High
- optical character recognition project character recognitionA stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...7.8 High
- optical character recognition project character recognitionA stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...7.8 High
- Show moreLoading…