CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L POST Request formSetMACFilter buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L POST Request formVirtualServ buffer overflow8.7 High
- bytecodealliance wasmtimeWasmtime leaks data between pooling allocator instances2.3 Low
- bytecodealliance wasmtimeWasmtime panics when transcoding misaligned utf-16 strings5.9 Medium
- tenda ac15, ac15 firmware +1 moreTenda AC15 SysToolChangePwd websGetVar stack-based overflow8.7 High
- d-link dir-645D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow8.7 High
- kamailioKamailio Core: TCP Data Processing Vulnerability7.5 High
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIs6.9 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreIncorrect boundary conditions in the Graphics: WebGPU component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.29.8 Critical
- tenda cx12l, cx12l firmware +1 moreTenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow8.7 High
- tenda cx12l, cx12l firmware +1 moreTenda CX12L RouteStatic fromRouteStatic stack-based overflow8.7 High
- tenda cx12l, cx12l firmware +1 moreTenda CX12L addressNat fromAddressNat stack-based overflow8.7 High
- tenda cx12l, cx12l firmware +1 moreTenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow8.6 High
- tenda cx12l, cx12l firmware +1 moreTenda CX12L P2pListFilter fromP2pListFilter stack-based overflow5.1 Medium
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formSetFirewall stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 Setting formSetSystemSettings stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formSetPassword stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formReboot stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWlEncrypt stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formCrossBandSwitch stack-based overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWISP5G stack-based overflow8.7 High
- tenda i12, i12 firmware +1 moreTenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 formWlanSetup stack-based overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow8.7 High
- tenda m3, m3 firmware +1 moreTenda M3 Destination setAdvPolicyData buffer overflow8.7 High
- utt hiper 1250gwUTT HiPER 1250GW formNatStaticMap strcpy buffer overflow8.7 High
- tenda ac10, ac10 firmware +1 moreTenda AC10 httpd fromSysToolChangePwd stack-based overflow8.7 High
- tenda ac10, ac10 firmware +1 moreTenda AC10 httpd fromSysToolChangePwd stack-based overflow8.7 High
- utt hiper 1250gwUTT HiPER 1250GW formRemoteControl stack-based overflow8.7 High
- nasa cfs, core flight system +1 moreNASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption5.1 Medium
- nasa cfs, core flight system +1 moreNASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow5.3 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6....8.8 High
- trendnet tew-657brm, tew-657brm firmware +1 moreTrendnet TEW-657BRM setup.cgi update_pcdb stack-based overflow8.7 High
- trendnet tew-657brm, tew-657brm firmware +1 moreTrendnet TEW-657BRM setup.cgi add_apcdb stack-based overflow8.7 High
- librawLibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds6.9 Medium
- automattic mongooseCesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow6.3 Medium
- automattic mongooseCesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow6.9 Medium
- librawLibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write5.3 Medium
- nothings stb, stb vorbis.c +1 moreNothings stb stb_vorbis.c start_decoder out-of-bounds write5.3 Medium
- nothings stb, stb truetype.h +1 moreNothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds5.3 Medium
- nothings stb, stb truetype.h +1 moreNothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds5.3 Medium
- ggml llama.cppllama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend9.8 Critical
- axiomatic bento4Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow4.8 Medium
- axiomatic bento4Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow4.8 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow8.7 High
- Show moreLoading…