CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4,...5.7 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4,...5.7 Medium
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...5.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4,...5.7 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4,...5.7 Medium
- No product listedImproper buffer restrictions in the firmware for the TDX Module may allow an escalation of...5.6 Medium
- ckolivas lrzipckolivas lrzip stream.c lzma_decompress_buf use after free4.8 Medium
- aardappel lobsteraardappel lobster Parsing parser.h ParseStatements memory corruption4.8 Medium
- aardappel lobsteraardappel lobster wfc.h WaveFunctionCollapse memory corruption4.8 Medium
- aprilrobotics apriltagAprilRobotics apriltag apriltag.c apriltag_detector_detect memory corruption4.8 Medium
ccextractorDebianCCExtractor MPEG-TS File ts_tables.c parse_PMT out-of-bounds4.8 Medium- janet-lang janetjanet-lang janet specials.c janetc_if out-of-bounds4.8 Medium
- janet-lang janetjanet-lang janet os.c os_strftime out-of-bounds4.8 Medium
- janet-lang janetjanet-lang janet compile.c janetc_pop_funcdef out-of-bounds4.8 Medium
- tenda ac8, ac8 firmware +1 moreTenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow8.7 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow8.7 High
- tenda ac9, ac9 firmware +1 moreTenda AC9 formGetRebootTimer stack-based overflow8.6 High
- tenda ac9, ac9 firmware +1 moreTenda AC9 formGetDdosDefenceList stack-based overflow8.6 High
- tenda rx3, rx3 firmware +1 moreTenda RX3 formSetQosBand set_qosMib_list stack-based overflow8.7 High
- tenda rx3, rx3 firmware +1 moreTenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow8.7 High
- tenda rx3, rx3 firmware +1 moreTenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow8.7 High
- tenda rx3, rx3 firmware +1 moreTenda RX3 openSchedWifi stack-based overflow8.7 High
- tenda rx3, rx3 firmware +1 moreTenda RX3 fast_setting_wifi_set stack-based overflow8.7 High
- tenda tx9, tx9 firmware +1 moreTenda TX9 setMacFilterCfg sub_4223E0 buffer overflow8.7 High
- tenda tx9, tx9 firmware +1 moreTenda TX9 fast_setting_wifi_set sub_432580 buffer overflow8.7 High
- tenda tx9, tx9 firmware +1 moreTenda TX9 SetStaticRouteCfg sub_42D03C buffer overflow8.7 High
- tenda tx3, tx3 firmware +1 moreTenda TX3 SetIpMacBind buffer overflow8.7 High
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G Management formFireWall strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formP2PLimitConfig strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formPolicyRouteConf strcpy buffer overflow8.7 High
- ggml-org llama.cppggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow4.8 Medium
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formSyslogConf strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formTimeGroupConfig strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formIpGroupConfig strcpy buffer overflow8.7 High
- color iccdeviccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()7.8 High
- ip-com w30ap, w30ap firmware +1 moreIP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow9.3 Critical
- happyfish100 libfastcommonhappyfish100 libfastcommon base64.c base64_decode stack-based overflow4.8 Medium
- mrubymruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free4.8 Medium
- micropythonmicropython runtime.c mp_import_all memory corruption4.8 Medium
- color iccdeviccDEV vulnerable to OOB in CIccXform3DLut::Apply()7.8 High
- color iccdeviccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()7.8 High
- color iccdeviccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()7.8 High
- color iccdeviccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float()7.8 High
- open5gsOpen5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow6.9 Medium
- google androidIn vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds...9.3 Critical
- totolink a3600r, a3600r firmware +1 moreTotolink A3600R app.so setAppEasyWizardConfig buffer overflow8.7 High
- tenda ac21, ac21 firmware +1 moreTenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow8.7 High
- rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c9.3 Critical
- gaijinentertainment dagorengineAn Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine9.3 Critical
- Show moreLoading…