CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon auto, qualcomm apq8096au firmware +1 moreMemory corruption in multimedia driver due to untrusted pointer dereference while reading data...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +108 more +110 moreOut of bound write in DSP service due to improper bound check for response buffer size in...8.4 High
- google androida function called 'nla_parse', do not check the len of para, it will check nla_type (which can be...9.8 Critical
- fedoraproject fedora, gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows...6.5 Medium
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that...9.8 Critical
- imagemagickA heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum...5.5 Medium
- libmodbus, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.7.8 High
- upxAn floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0...5.5 Medium
- upxA heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via...7.8 High
- upxA heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via...7.8 High
- upxA heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX...7.8 High
- upxAn invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX...5.5 Medium
- upxAn invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in...5.5 Medium
- upxA heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in...7.8 High
- apple macos, mac os x +1 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5,...9.8 Critical
- libpng pngcheck, debian linux +1 moreA global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied)...7.8 High
- artifex ghostscript, debian linux, red hat enterprise linux 6 +3 more +5 moreGhostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c7.1 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version...7.8 High
- intel dual band wireless-ac 3165 firmware, dual band wireless-ac 3168 firmware, dual band wireless-ac 8260 firmware +15 more +17 moreImproper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM)...5.5 Medium
- intel dual band wireless-ac 3165 firmware, dual band wireless-ac 3168 firmware, dual band wireless-ac 8260 firmware +15 more +17 moreImproper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM)...7.8 High
- intel proset wi-fi 6e ax210 firmware, wi-fi 6 ax200 firmware, wi-fi 6 ax201 firmware +6 more +8 moreImproper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an...7.5 High
- jpeg libjpeglibjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger:...6.5 Medium
- jpeg libjpeglibjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at...6.5 Medium
- upxA Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An...5.5 Medium
- monostream tifigtifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std...5.5 Medium
- monostream tifigtifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.5.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump...6.5 Medium
- gumstix overo sbcThe Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other...7.5 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the PSD Header processing memory allocation...8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-324557.5 High
- rust-websocket project rust-websocket, fedoraproject fedora +1 moreMemory allocation based on untrusted length in rust-websocket7.5 High
- google androidThe method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents...7.5 High
- google androidThe method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the...7.5 High
- patlite nhl-fb2 firmware, nhp-fb2 firmware +1 moreOn Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by...7.5 High
- Show moreLoading…