CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreSerial API Buffer Overflow in Z/IP Gateway7.1 High
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreGlobal read overflow in Z/IP Gateway3.5 Low
- fujielectric tellus, tellus lite, fuji electric co., ltd. tellus and tellus lite +2 moreAccess of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4...7.8 High
- the x11 project libx11, redhat enterprise linux +1 moreA vulnerability was found in libX11. The security flaw occurs because the functions in src...7.5 High
- cloudflare cfntsOut of Bounds Slice index in cfnts leads to remote panic8.6 High
- zoom, zoom video communications, inc. for windows client +1 moreZoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the...8.3 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +4 more +6 moreA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization...7.8 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...7.2 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Read7.8 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Write7.8 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Write7.8 High
- qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL8.4 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +124 more +126 moreUntrusted Pointer Dereference in Core6.2 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +57 more +59 moreImproper restriction of operations within the bounds of memory buffer in Linux6.7 Medium
- ibm aspera cargo, aspera connect +1 moreIBM Aspera buffer overflow8.4 High
- opensc, redhat enterprise linux +1 moreA vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in...7.1 High
- google androidIn setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the...5.5 Medium
- riot-os riotRIOT-OS vulnerable to Out of Bounds Write in _rbuf_add9.8 Critical
- riot-os riotRIOT-OS vulnerable to Out of Bounds write in routing with SRH7.5 High
- mindsporeMindSpore json_helper.cc UpdateArray memory corruption3.5 Low
- avast antivirus, filseclab twister antivirus +1 moreTwister Antivirus IoControlCode filppd.sys 0x80800043 memory corruption5.3 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 moreCODESYS: Multiple products prone to improperly restricted memory operations6.5 Medium
- libraw, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously...6.5 Medium
- intel server system d50tnp1mhcpac firmware, server system d50tnp1mhcrac firmware, server system d50tnp1mhcrlc firmware +7 more +9 moreImproper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may...8.2 High
- intel server system d50tnp1mhcpac firmware, server system d50tnp1mhcrac firmware, server system d50tnp1mhcrlc firmware +7 more +9 moreAccess of memory location after end of buffer in some Intel(R) Server Board BMC firmware before...8.2 High
- intel quickassist technologyImproper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4...3.3 Low
- intel i915 graphicsImproper restriction of operations within the bounds of a memory buffer in some Intel(R) i915...8.8 High
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen 3945wx firmware, ryzen 3955wx firmware +6 more +8 moreA malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which...9.8 Critical
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3),...7.8 High
- libtiffA vulnerability was found in the libtiff library. This security flaw causes a heap buffer...5.5 Medium
- libtiff, apple macos +1 moreA vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue...5.5 Medium
- cesanta mjsAn issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the...5.5 Medium
- ibm mq, mq appliance +1 moreIBM MQ denial of service5.9 Medium
- llvmllvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component...5.5 Medium
- qualcomm ar8035 firmware, qam8295p firmware, qca6390 firmware +53 more +55 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Automotive7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn spipe drive, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- nvidia sbios, dgx servers +1 moreNVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of...6.0 Medium
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of...7.5 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of...7.5 High
- artifex mujsBuffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow...9.8 Critical
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c....5.5 Medium
- gnu binutilsA potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c....6.5 Medium
- jtekt screen creator advance 2Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction...7.8 High
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper...3.3 Low
- f5 njsNginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return...7.5 High
- bzip3 project bzip3An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an...6.5 Medium
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...3.3 Low
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a...8.8 High
- irfanviewIrfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting...5.5 Medium
- Show moreLoading…