CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...8.6 High
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 moreMemory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 morePossible memory corruption in kernel while performing memory access due to hypervisor not...8.4 High
- pacparser project pacparserpacparser pacparser.c pacparser_find_proxy buffer overflow5.3 Medium
- linux-loader project linux-loaderrust-vmm linux-loader vulnerable to Out-of-bounds Read4.0 Medium
- avast antivirus, script shield, nortonlifelock avast antivirus +2 moreAswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption7.7 High
- ibm content navigatorIBM Content Navigator code execution7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn camera driver, there is a possible memory corruption due to improper locking. This could lead...5.5 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A7.5 High
- google androidIn Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check...6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A5.5 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A7.5 High
- google androidIn onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible...7.8 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...8.8 High
- hp inc. print products and digital sending products, hp color laserjet cm4540 mfp cc419a firmware, color laserjet cm4540 mfp cc420a firmware +2,692 more +2,694 moreCertain HP Print products and Digital Sending products may be vulnerable to potential remote code...9.8 Critical
- gnu bash, redhat enterprise linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the bash package, where a heap-buffer overflow can occur in valid...7.8 High
- silabs.com ember znet, silabs gecko software development kit, zigbee emberznet +2 moreMalformed Zigbee packet with invalid destination address causes Assert5.7 Medium
- freerdp, fedoraproject fedora +1 moreMissing input length validation in `drive` channel in FreeRDP4.6 Medium
- phoenix contact config+, pc worx, phoenixcontact automationworx software suite +1 more +3 moreBuffer Overflow in PHOENIX CONTACT Automationworx Software Suite7.8 High
- insyde kernelUse of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and...8.2 High
- insyde kernelIn UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers...8.2 High
- silabs emberznet, silabs.com ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier6.5 Medium
- silabs emberznet, silicon labs ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier6.5 Medium
- htmldoc project htmldocA heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to...7.5 High
- axiomatic bento4Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow6.3 Medium
- ffmpegffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds4.3 Medium
- ffmpegffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds4.3 Medium
- intel nuc 8 rugged board nuc8cchbn firmware, nuc 8 rugged kit nuc8cchkr firmware, nuc 8 rugged kit nuc8cchkrn firmware +1 more +3 moreImproper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards...7.5 High
- intel nuc m15 laptop kit lapbc510 firmware, nuc m15 laptop kit lapbc710 firmware +1 moreImproper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before...7.5 High
- intel xmm 7560 firmwareImproper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version...3.3 Low
- intel xmm 7560 firmwareImproper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version...6.0 Medium
- intel hyperscanImproper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions...4.3 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower services software for asa +2 more +4 moreA vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and...7.7 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security...8.6 High
- facebook redexDexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of...9.8 Critical
- sap 3d visual enterprise author, 3d visual enterprise viewer +1 moreDue to lack of proper memory management, when a victim opens manipulated file received from...7.0 High
- bytecodealliance wasmtimeWasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration5.9 Medium
- silabs gecko bootloaderGecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices8.3 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13....7.8 High
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7...5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreOxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn camera driver, there is a possible memory corruption due to improper locking. This could lead...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS...7.8 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7,...8.8 High
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1...6.7 Medium
- Show moreLoading…