CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- ni labviewMemory Corruption Due to Improper Length Checks in LabVIEW tdcore.dll8.4 High
- supermicro x11dph-i, x11dph-t, x11dph-tq +2 moreAn SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i...7.5 High
- supermicro x11dph-i, x11dph-t, x11dph-tq +2 moreAn arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and...7.5 High
- linux, linux kernel +1 moredrm/radeon: fix UBSAN warning in kv_dpm.c5.5 Medium
- citrix netscaler agent, netscaler console, netscaler sdx +3 more +5 moreDenial of Service7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Fax Service Remote Code Execution Vulnerability8.8 High
wasmtime-jit-debugcrates.iowasmtime_jit_debug Dumps Undefined Memory by `JitDumpFile`5.5 Medium- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +67 more +69 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader6.8 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +40 more +42 moreImproper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services8.4 High
- mediatek lr12a, mt2731, mt6739 +17 more +19 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...7.5 High
- mediatek lr12a, mt2731, mt6739 +17 more +19 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...7.5 High
- arm 5th gen gpu architecture firmware, valhall gpu firmware, 5th gen gpu architecture kernel driver +1 more +3 moreMali GPU Firmware allows improper GPU processing operations7.8 High
- silabs sisdkDenial of service in multi-protocol gateway - Zigbee + Thread6.5 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...8.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- htopAn issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the...8.4 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote...9.6 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreMicrosoft Streaming Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +30 more +32 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1...8.8 High
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- opentelemetry configgrpc, confighttp, opentelemetry +2 more +4 moreOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC8.2 High
- huawei curiem-wfg9b, curiem-wfg9b firmware +1 moreHuawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRA…7.8 High
- huawei egrt-00, egrt-00 firmware +1 moreSome Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail.7.2 High
- apple ipados, macos, safari +7 more +9 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7...8.8 High
- linux, linux kernel +1 morevirtio-net: fix pages leaking when building skb in big mode5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Avoid HDCP over-read and corruption9.1 Critical
- linux, linux kernel +1 moreswiotlb: Fix double-allocation of slots due to broken alignment handling7.8 High
- intel alder lake, comet lake, rocket lake +1 more +3 moreImproper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to...6.1 Medium
- intel media sdkImproper buffer restrictions in Intel(R) Media SDK software all versions may allow an...3.3 Low
- intel media sdkImproper input validation in Intel(R) Media SDK software all versions may allow an authenticated...5.9 Medium
- intel media sdkImproper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user...4.8 Medium
- intel server system d50tnp2mhsvac firmwareImproper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server...7.5 High
- zoom workplace, meeting software development kit, workplace desktop +2 more +4 moreZoom Apps - Buffer Overflow6.5 Medium
- siemens simcenter femap, ps\/iges parasolid translator, ps iges parasolid translator component +2 moreA vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V27...7.3 High
- nvidia triton inference serverCVE5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP TMM tenants on VELOS and rSeries vulnerability6.5 Medium
- panasonic holdings corporation kw watcherKW Watcher Vulnerability ALlows Malicious Read Access to Memory4.4 Medium
- kofax power pdfKofax Power PDF J2K File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- trimble sketchup viewerTrimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- Show moreLoading…