CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreImproper handling between export and release functions on the same handle from client can lead to...6.7 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS...9.8 Critical
- apple macosA memory corruption issue was addressed with improved state management. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple macosA memory corruption issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
- libjpeg project libjpegIn libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may...6.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...6.1 Medium
- radare radare2radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.5.5 Medium
- tenda ac9 firmwareThere is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router...6.5 Medium
- openpolicyagent open policy agentOut of bounds memory access in github.com/open-policy-agent/opa7.5 High
- huawei emui, harmonyos, magic ui +2 moreThe audio module has a vulnerability in verifying the parameters passed by the application space...9.8 Critical
- amd athlon™ series, ryzen 3 3100 firmware, ryzen 3 3300g firmware +48 more +50 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct...5.5 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +49 more +51 moreA malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call...7.8 High
- intel xeon e3-1220 v5 firmware, xeon e3-1220 v6 firmware, xeon e3-1225 v5 firmware +34 more +36 moreReturn of pointer value outside of expected range in the BIOS firmware for some Intel(R)...7.8 High
- intel xeon bronze 3204 firmware, xeon bronze 3206r firmware, xeon e-2124 firmware +165 more +167 moreUse of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a...7.8 High
- intel lapbc510 firmware, lapbc710 firmware, lapkc51e firmware +56 more +58 moreImproper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to...6.7 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 moreInsufficient bound checks in the System Management Unit (SMU) may result in a system voltage...5.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreInsufficient bounds checking in an SMU mailbox register could allow an attacker to potentially...5.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...5.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 moreInsufficient bound checks related to PCIE in the System Management Unit (SMU) may result in...5.5 Medium
- amd athlon™ series, ryzen 3 5300g firmware, ryzen 3 5300ge firmware +29 more +31 moreInsufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in...5.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 20226.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +84 more +86 moreImproper validation of session id in PCM routing process can lead to memory corruption in...6.7 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c,...7.3 High
- gpac, debian linux +1 moreMP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion....7.8 High
- openscadA vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not...5.5 Medium
- dell c4130 firmware, c6320 firmware, fc430 firmware +18 more +20 moreDell PowerEdge Server BIOS contains an Improper SMM communication buffer verification...5.7 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreUse of Out-of-range Pointer Offset in vim/vim6.8 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick, a heap buffer overflow was found when parsing MIFF.7.8 High
- pixar openusd, apple macos +1 moreAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary...4.3 Medium
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...7.5 High
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...7.5 High
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...9.8 Critical
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability8.6 High
- gerbv, gerbv forked +1 moreAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive...9.3 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft...8.1 High
- artifex ghostpclGhostPCL gsmchunk.c chunk_free_object memory corruption4.3 Medium
- vyperlang vyperBuffer overflow in Vyper7.1 High
- siemens simatic s7-400 cpu 412-1 dp v7, simatic s7-400 cpu 412-2 dp v7, simatic s7-400 cpu 412-2 pn/dp v7 +21 more +23 moreA vulnerability has been identified in SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) ...7.5 High
- google android, mediatek, inc. mt6580, mt6737, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt6985, mt8321, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 +1 moreIn ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could...6.7 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory...7.6 High
- github.com/ipld/go-codec-dagpb, protocol go-codec-dagpb +1 morePanic when decoding invalid blocks in github.com/ipld/go-codec-dagpb7.5 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 moreUntrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.7.1 High
- softing opc ua c++ sdk (software development kit), opc ua c\+\+ software development kit +1 moreSofting OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 High
- omron cx-positionRockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 High
- google androidIn Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a...7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreA flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of...7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreAn out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was...8.0 High
- apple ipados, macos, tvos +3 more +5 moreA memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15...7.8 High
- apple ipados, itunes, macos +4 more +6 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- Show moreLoading…