CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS...6.2 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...7.5 High
- apple ipados, macos, safari +18 more +20 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...7.5 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...7.5 High
- apple ipados, macos, safari +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...7.5 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...8.8 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...7.5 High
squirrel3DebianSquirrel sqobject.cpp Load heap-based overflow5.1 Medium- d-link dcs-935l, dlink dcs-935l firmware +1 moreD-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow8.7 High
squirrel3DebianSquirrel sqstdstring.cpp validate_format stack-based overflow4.8 Medium- efm iptime a8004tEFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow8.7 High
- osgeo gdalOSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWSDfldsrch heap-based overflow4.8 Medium
- open5gsOpen5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-bounds6.9 Medium
- tenda cx12l, cx12l firmware +1 moreTenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow8.7 High
- totolink x5000rTotolink X5000R formDdns sub_458E40 buffer overflow8.7 High
- osgeo gdalOSGeo gdal GDapi.c GDfieldinfo out-of-bounds4.8 Medium
- osgeo gdalOSGeo gdal GDapi.c GDnentries heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWnentries heap-based overflow4.8 Medium
- osgeo gdalOSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds4.8 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.28.1 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 CGI user_group.asp sprintf buffer overflow8.6 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 Web Management url_member.asp buffer overflow8.6 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow8.7 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow9.3 Critical
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow9.3 Critical
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 yyxz.asp sprintf stack-based overflow8.6 High
- efm iptime nas1dualEFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow9.3 Critical
- qualcomm fastconnect 6200 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +18 more +20 moreUntrusted Pointer Dereference in Power Optimization Firmware7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, iqx5121 firmware +14 more +16 moreUntrusted Pointer Dereference in Camera7.8 High
- totolink n300rhTotolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow8.7 High
- totolink n300rhTotolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow8.7 High
- totolink n300rhTotolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow8.7 High
- totolink n300rhTotolink N300RH Parameter cstecgi.cgi loginauth buffer overflow9.3 Critical
- osrg gobgposrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds6.9 Medium
- osrg gobgposrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow6.9 Medium
- totolink wa300Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow9.3 Critical
- totolink wa300Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- edimax br-6208acEdimax BR-6208AC setWAN buffer overflow8.7 High
- edimax br-6428ncEdimax BR-6428nC setWAN buffer overflow8.7 High
- shenzhen libituo technology lbt-t300-hw1Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflow8.7 High
- shenzhen libituo technology lbt-t300-hw1Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflow8.7 High
- mikrotik routerosMikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds6.9 Medium
- trendnet tew-821dap, tew-821dap firmware +1 moreTRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflow8.7 High
- Show moreLoading…