CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing...4.4 Medium
- google androidIn parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds...7.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem...6.6 Medium
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.2,...7.8 High
asciicrates.ioAscii (crate) allows out-of-bounds array indexing in safe codeNo score- hewlett packard enterprise (hpe) hpe serviceguard for linux, hpe serviceguard for linux +1 morePre-auth memory corruption in HPE Serviceguard9.8 Critical
- php, fedora, red hat enterprise linux 6 +5 more +7 morePotential buffer overflow in php_cli_server_startup_workers6.2 Medium
- intel media software development kitImproper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow...5.7 Medium
- c-ares, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 High
- siemens solid edge se2022, solid edge se2023 +1 moreA vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...7.8 High
- siemens jt open, jt utilities, jt open toolkit +2 moreA vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...7.8 High
- mrubyAn Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc....7.5 High
- dell c4130 firmware, c4140 firmware, c6320 firmware +78 more +80 moreDell PowerEdge BIOS contains an Improper SMM communication buffer verification vulnerability. A...1.9 Low
- dell c4130 firmware, c4140 firmware, c6320 firmware +78 more +80 moreDell PowerEdge BIOS contains an improper input validation vulnerability. A local authenticated...3.9 Low
- qualcomm apq8096au firmware, aqt1000 firmware, msm8996au firmware +40 more +42 moreUse of out-of-range pointer offset in Audio6.7 Medium
- delta electronics diascreenCVE-2023-02517.8 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreMemory leak when receiving messages in APROL Tbase server7.5 High
- intel c\+\+ compilerImproper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.7.1. for some...6.0 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2,...8.8 High
- trendnet tew-811dru, tew-811dru firmware +1 moreTRENDnet TEW-811DRU Web Management Interface wan.asp memory corruption6.5 Medium
- trendnet tew-652brp, tew-652brp firmware +1 moreTRENDnet TEW-652BRP Web Service cfg_op.ccp memory corruption7.5 High
- trendnet tew-811dru, tew-811dru firmware +1 moreTRENDnet TEW-811DRU httpd security.asp memory corruption7.5 High
- schneider electric canbrassA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...5.3 Medium
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- dell alienware m15 a6 firmware, alienware m15 ryzen edition r5 firmware, alienware m17 ryzen edition r5 firmware +13 more +15 moreDell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A...5.1 Medium
- nvidia sbios, dgx servers +1 moreDGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of...6.0 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and...7.2 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +2 more +4 moreThe APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF...7.8 High
- upx, fedoraproject fedora +1 moreUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp5.3 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address...7.5 High
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to...7.5 High
- amd 2nd gen epyc, 3rd gen epyc, milanpi-sp3 firmware +1 more +3 moreThe software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting...5.3 Medium
- asus rt-ax82u, rt-ax82u firmware +1 moreAn information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3...7.5 High
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...7.8 High
- siemens solid edgeA vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL...7.8 High
- siemens jt open, jt utilities, solid edge +1 more +3 moreA vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All...7.8 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +120 more +122 moreInteger overflow to buffer overflow in Audio5.9 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +148 more +150 moreInteger Overflow to Buffer Overflow in Bluetooth HOST9.8 Critical
- google androidThe PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This...5.5 Medium
- nvidia gpu display driver, cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager) +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data ta…7.1 High
- sslh project sslhsslh Packet Dumping probe.c hexdump format string5.6 Medium
- multimon-ng project multimon-ngmultimon-ng demod_flex.c add_ch format string5.5 Medium
- samba pppppp pppdump pppdump.c dumpppp array index4.3 Medium
- axiomatic bento4Axiomatic Bento4 mp42aac heap-based overflow6.3 Medium
- apple ipados, macos, tvos +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...5.5 Medium
- Show moreLoading…