CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- sante dicom viewer proThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...9.8 Critical
- google chromeInappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a...8.8 High
- mruby, mruby mruby/mruby +1 moreUse of Out-of-range Pointer Offset in mruby/mruby8.4 High
- nginx njsnjs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via...9.8 Critical
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vim8.4 High
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8791, mt8797 +1 moreIn ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion driver, there is a possible information disclosure due to an incorrect bounds check. This...5.5 Medium
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791 +1 moreIn ion driver, there is a possible information disclosure due to an incorrect bounds check. This...5.5 Medium
- google android, mediatek, inc. mt6765, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion driver, there is a possible information disclosure due to an incorrect bounds check. This...5.5 Medium
- huawei emuiThere is a vulnerability of unstrict input parameter verification in the audio assembly...9.8 Critical
- microsoft excel, 365 apps, 365 apps for enterprise +13 more +15 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens jt2go, solid edge se2021, solid edge se2022 +5 more +7 moreA vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...7.8 High
- siemens jt2go, solid edge se2021, solid edge se2022 +5 more +7 moreA vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location Before Start of Buffer in radareorg/radare26.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location After End of Buffer in radareorg/radare26.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreBuffer Access with Incorrect Length Value in radareorg/radare26.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare28.8 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote...8.8 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM...8.2 High
- insyde insydeh2o, netapp fas\/aff bios, siemens ruggedcom ape1808 - bios +33 more +35 moreAn issue was discovered in Kernel 5.x (starting from 5.1) in Insyde InsydeH2O, has a SMM memory...7.5 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +30 more +32 moreAn unsafe pointer vulnerability exists in SMM (System Management Mode) branch that registers a...8.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreA vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that...8.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +30 more +32 moreA vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that...8.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +30 more +32 moreAn unsafe pointer vulnerability exists in SMM (System Management Mode) branch that registers a...8.2 High
- stormshield network securityIn ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0...9.8 Critical
- autodesk design reviewA Memory Corruption Vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 and...7.8 High
- jerryscriptThere is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at /jerry-core/ecma/operations...5.5 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreAccess of Memory Location Before Start of Buffer in vim/vim8.4 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +409 more +411 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +409 more +411 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- bluez, debian linux, fedoraproject fedora +2 moreA heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...8.8 High
- moddable sdkModdable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the...5.5 Medium
- nvidia shield tv, shield experience +1 moreNVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high...6.7 Medium
- mrubyAn untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation...7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Memory Corruption could lead to Information Disclosure5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Memory Corruption could lead to Application denial-of-service5.5 Medium
- gpacGPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function...5.5 Medium
- gpacGPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function...5.5 Medium
- gpacGPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function...5.5 Medium
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- gpacGPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function...5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +10 more +12 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper...7.1 High
- huawei emui, harmonyos +1 moreThe bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation...7.5 High
- Show moreLoading…