CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- siemens simcenter femap v2306, simcenter femap v2401, simcenter femap v2406 +1 more +3 moreA vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- winhexA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This...7.3 High
- winhexA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This...7.3 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +116 more +118 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOS7.8 High
- qualcomm qam8295p firmware, qca6584au firmware, qca6595 firmware +18 more +20 moreUntrusted Pointer Dereference in DSP Service7.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...7.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA potential memory corruption vulnerability could be triggered if an attacker had the ability to...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIt is currently unknown if this issue is exploitable but a condition may arise where the...8.8 High
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 moreUnchecked buffer in Dynamic DNS client9.2 Critical
- zyxel vmg8825-t50k firmware, ax7501-b1 firmware, dx3300-t0 firmware +38 more +40 moreAn improper restriction of operations within the bounds of a memory buffer in the USB file...4.9 Medium
- zyxel vmg8825-t50k firmware, ax7501-b1 firmware, dx3300-t0 firmware +38 more +40 moreAn improper restriction of operations within the bounds of a memory buffer in the MAC address...4.9 Medium
- zyxel vmg8825-t50k firmware, ax7501-b1 firmware, dx3300-t0 firmware +38 more +40 moreAn improper restriction of operations within the bounds of a memory buffer in the IPv6 address...4.9 Medium
- zyxel vmg8825-t50k firmware, ax7501-b0 firmware, ax7501-b1 firmware +39 more +41 moreAn improper restriction of operations within the bounds of a memory buffer in the parameter type...4.9 Medium
- envoyproxy envoyJwt filter crash in the clear route cache with remote JWKs in envoy5.3 Medium
- envoyproxy envoyEnvoy crashes for LocalReply in http async client6.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS...7.5 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS...8.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe after effectsAfter Effects | Heap-based Buffer Overflow (CWE-122)7.8 High
- wibu wibukeyAn issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70...7.8 High
- dell 7920 xl firmware, precision rack bios, precision 7920 firmware +2 moreDell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory...3.8 Low
- totolink ac1200 t10, ac1200 t8, ac1200 t10 firmware +3 more +5 moreTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow8.7 High
- mozilla firefoxMemory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of...9.8 Critical
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +331 more +333 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storage6.8 Medium
- linux, linux kernel +1 morebpf: Fix crash due to incorrect copy_map_value7.8 High
- uci idol2, idol 2 +1 moreAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input...9.8 Critical
- google chromeInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- google chromeOut of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 firmware +1 moreAutel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- alibaba t-head xuantie c910, t-head xuantie c920 +1 moreThe T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON...8.4 High
- ibm security directory integrator, security verify directory integrator +1 moreIBM Directory Server buffer overflow7.3 High
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge (HTML-based) Memory Corruption Vulnerability8.4 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...6.0 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +208 more +210 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOS7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +140 more +142 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Automotive7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +164 more +166 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor8.4 High
- vivotek sd9364, sd9364 firmware +1 moreVivotek SD9364 httpd read stack-based overflow8.7 High
- vivotek cc8160, cc8160 firmware +1 moreVivotek CC8160 httpd read stack-based overflow8.7 High
- mediatek mt2735, mt2737, mt6833 +31 more +33 moreIn Modem, there is a possible memory corruption due to a missing bounds check. This could lead to...9.8 Critical
- ni labviewMemory Corruption Due to Improper Length Check in NI LabVIEW8.4 High
- Show moreLoading…