CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- cardboardpowered cardboardChunk Unloading Security Vulnerability in CardboardPowered/cardboard9.2 Critical
- anyrtcio-community anyrtc-rtmp-opensourceA heap-based buffer over-read or buffer overflow in tildearrow/furnace8.7 High
- pymumu smartdnspymumu SmartDNS SVBC Record dns.c _dns_decode_SVCB_HTTPS stack-based overflow6.3 Medium
- tenda ac23, ac23 firmware +1 moreTenda AC23 WifiExtraSet buffer overflow8.7 High
- gpacGPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write4.8 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: ip_gre: make ipgre_header() robust5.5 Medium
- google sentencepiece, red hat ai inference server, enterprise linux ai (rhel ai) 3 +3 more +5 moreInvalid Memory Access in Sentencepiece,8.5 High
- tenda ax1803, ax1803 firmware +1 moreTenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflow8.7 High
- totolink nr1800x, nr1800x firmware +1 moreTotolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow8.7 High
- utt hiper 810, 810 firmware +1 moreUTT HiPER 810 setSysAdm strcpy buffer overflow9.3 Critical
- totolink lr350, lr350 firmware +1 moreTotolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow8.7 High
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow5.3 Medium
- quickjs-ng quickjsquickjs-ng quickjs Atomics Ops quickjs.c use after free5.3 Medium
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptAli strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptMSN strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptQQ strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflow8.7 High
- assimpOpen Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free4.8 Medium
- mapnikMapnik dbfile.cpp string_value heap-based overflow4.8 Medium
- byvoid opencc, open chinese convert +1 moreBYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflow4.8 Medium
- raylibraysan5 raylib rtext.c GenImageFontAtlas heap-based overflow4.8 Medium
- cijliu librtspcijliu librtsp rtsp_parse_method buffer overflow4.8 Medium
- cijliu librtspcijliu librtsp rtsp_parse_request buffer overflow4.8 Medium
- cijliu librtspcijliu librtsp rtsp_rely_dumps buffer overflow4.8 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS...7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - zero initialize memory allocated via sock_kmalloc5.5 Medium
- blurams dome flare firmwareA vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier...6.1 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory3.5 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_gre: make ip6gre_header() robust5.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 147 and Thunderbird 1479.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 1478.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics component5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.0 High
- academysoftwarefoundation opencolorioAcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds4.8 Medium
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formPictureUrl strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formConfigNoticeConfig strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W APSecurity strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigWirelessBase strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formFireWall strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formConfigFastDirectionW strcpy buffer overflow8.7 High
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow5.3 Medium
- quickjs-ng quickjsquickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow6.9 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari...6.5 Medium
- tenda ac23, ac23 firmware +1 moreTenda AC23 PowerSaveSet sscanf buffer overflow8.7 High
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the adjacent network could overflow the UniFi Protect...6.5 Medium
- Show moreLoading…