CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- shibby tomatoShibby Tomato rc setup_conntrack out-of-bounds write8.7 High
- cmusphinx pocketsphinxPocketSphinx: Buffer overflows in language and acoustic model loading code6.9 Medium
- liftoff-sr cipsterliftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-bounds6.9 Medium
- No product listedAn issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory...7.5 High
- absolute secure accessMemory management vulnerability in Secure Access clients6.9 Medium
- absolute secure accessMemory management vulnerability in Secure Access servers6.9 Medium
- cisco roomos, roomos software, roomos cloud +2 moreCisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities8.1 High
- totolink nr1800xTotolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow9.3 Critical
- tenda be12 proTenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow8.7 High
- tenda be12 proTenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow8.7 High
- tenda be12 proTenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow8.7 High
- tenda be12 proTenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow8.7 High
- tenda be12 proTenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow8.7 High
- tenda be12 proTenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow8.7 High
- shibby tomatoShibby Tomato DNS List Rendering httpd sub_407220 stack-based overflow8.7 High
- shibby tomatoShibby Tomato apcupsd tomatodata.cgi main out-of-bounds write8.7 High
- shibby tomatoShibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow8.7 High
- tenda ch22Tenda CH22 CertListInfo formCertListInfo buffer overflow8.7 High
- gnu libredwgGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow4.8 Medium
- secureage catchpulseSecureAge CatchPulse Driver saappctl.sys heap-based overflow8.5 High
- trendnet tew-821dapTRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow8.7 High
- trendnet tew-821dapTRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow8.7 High
- trendnet tew-635brmTrendnet TEW-635BRM Web Service rc start_httpd stack-based overflow8.7 High
- No product listedOpen5GS AMF context.c amf_context_final use after free4.8 Medium
gpacDebianGPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds4.8 Medium- gnu libredwgGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow4.8 Medium
- davenardella snap7davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead out-of-bounds write5.3 Medium
gpacDebianGPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow4.8 MediumgpacDebianGPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free4.8 Medium- radare radare2radareorg radare2 Memory64ListStream mdmp.c stack-based overflow4.8 Medium
- radare radare2radareorg radare2 cfile.c r_core_bin_load use after free4.8 Medium
- radare radare2radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free4.8 Medium
- radare radare2radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow4.8 Medium
- utt hiper 1250gwUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow8.7 High
- onnxonnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds5.3 Medium
- open asset import library assimpOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow4.8 Medium
- No product listedRT-Thread lwp_syscall.c sys_getaddrinfo memory corruption6.8 Medium
- No product listedRT-Thread SWM341 CAN SWM341.h CAN_Receive stack-based overflow8.5 High
- No product listedRT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow8.5 High
- open asset import library assimpOpen Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free5.3 Medium
- No product listedBuffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker...6.5 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...8.8 High
- open asset import library assimpOpen Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow4.8 Medium
- No product listedAn access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit...5.5 Medium
- mozilla firefoxMemory safety bugs fixed in Firefox 152.0.49.8 Critical
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreMultiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service8.8 High
- citrix netscaler adc and netscaler gateway, netscaler gateway, netscaler adc +2 more +4 moreMemory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service8.8 High
- apple ipados, macos, safari +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- Show moreLoading…