CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF GIF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PCX File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PNG File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +234 more +236 moreUse of Out-of-range Pointer Offset in Video7.8 High
- linux, linux kernel +1 moredrm/i915/gem: Really move i915_gem_context.link under ref protection7.8 High
- debian linux, linux kernel +1 morefirmware: arm_scmi: Harden accesses to the reset domains7.8 High
- jerryscriptJerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component...7.1 High
- grassroot dicom dicom, fedoraproject fedora, grassroot platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of...7.7 High
- grassroot dicom dicom, fedoraproject fedora, malaterre grassroots dicom +2 moreAn out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon...8.1 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3,...7.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function8.1 High
- linux ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function8.1 High
- solanalabs web3, solana-labs solana-web3.js +1 moreHandling untrusted input can result in a crash, leading to loss of availability / denial of service7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: Fix DEVMAP_HASH overflow check on 32-bit arches7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: Fix hashtab overflow check on 32-bit arches7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: Fix stackmap overflow check on 32-bit arches7.8 High
- google chrome, fedoraproject fedora +1 moreObject corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to...8.8 High
- mozilla firefoxMemory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory...8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...8.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash8.7 High
- honeywell experion server, experion lx, experion process knowledge system +1 more +3 moreServer receiving a malformed message that where the GCL message hostname may be too large which...7.4 High
- linux ofono, fedoraproject fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function8.1 High
- ibm personal communicationsIBM Personal Communications code execution9.0 Critical
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote...8.8 High
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx6.5 Medium
- rockwell automation arena simulation, rockwellautomation arena, arena simulation software +2 moreRockwell Automation Arena Simulation Vulnerable To Memory Corruption7.8 High
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....9.8 Critical
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +56 more +58 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication...5.3 Medium
- siemens cerberus pro en engineering tool, cerberus pro en fire panel fc72x ip6, cerberus pro en fire panel fc72x ip7 +29 more +31 moreA vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus...7.5 High
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7...3.3 Low
- silabs z-wave software development kit, silicon labs z-wave sdk +1 moreZ-Wave S0 Decryption Vulnerability in End Devices8.8 High
- swftoolsswftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at...5.5 Medium
- ibm sterling connect:express for unix, sterling connect\ +1 moreIBM Connect:Express for UNIX denial of service7.5 High
- hp thinpro, hp inc. thinpro 8.0 +1 morePrevious versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security...8.2 High
- google androidIn ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a...7.8 High
- vyperlang vyperVyper _abi_decode Memory Overflow3.7 Low
- linux, linux kernel +1 morepwm: Fix out-of-bounds access in of_pwm_single_xlate()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEDAC/thunderx: Fix possible out-of-bounds string access7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moref2fs: fix to avoid dirent corruption7.8 High
- linux, linux kernel +1 morebpf: Reject variable offset alu on PTR_TO_FLOW_KEYS7.8 High
- linux, linux kernel +1 moreLoongArch: BPF: Prevent out-of-bounds memory access7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- Show moreLoading…