CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
gpacUbuntuGPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read4.8 Medium- totolink a3002muTotolink A3002MU boa formPortFw buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU boa formNewSchedule buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU boa formIpv6Setup buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU boa formFilter buffer overflow9.4 Critical
gpacUbuntuGPAC MP4Box list.c gf_list_count use after free4.8 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow4.8 Medium- davenardella snap7davenardella snap7 s7_micro_client.cpp opUpload memory corruption5.1 Medium
- cjson project cjsonDaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free6.9 Medium
- behavioral technology group pavlok behavioral conditioning wearableBehavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow9.4 Critical
- google chromeMemory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...8.8 High
- cesanta mjsCesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow6.9 Medium
- xenx86: improper handling of HVM emulation return codes8.8 High
- No product listedvgmstream txth-txtp txth.c sscanf stack-based overflow5.3 Medium
- d-link dir-822aD-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write9.4 Critical
- d-link dir-895lD-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow9.4 Critical
- java-json-tools json-patchjava-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow6.9 Medium
- 92181 markdown92181 markdown md.c lds out-of-bounds6.9 Medium
- d-link dir-822aD-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow10.0 Critical
- modelcloud gptqmodelModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds5.3 Medium
- valkey-io valkeyvalkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds2.3 Low
- tenda hg10Tenda HG10 Boa Web Server formWanRedirect buffer overflow8.7 High
- tenda hg10Tenda HG10 formURL buffer overflow9.3 Critical
- valkey-io valkeyvalkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds6.9 Medium
- tenda hg10Tenda HG10 Boa Web Server formWlanSetup buffer overflow8.7 High
- tenda hg10Tenda HG10 Boa Web Server formLogin buffer overflow9.3 Critical
- totolink cp450TOTOLINK CP450 cstecgi.cgi buffer overflow9.4 Critical
- rockwell automation compactlogix® 5380 / controllogix® 5580CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities8.7 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.27.5 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.159.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 1559.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.157.5 High
flvmetaDebianFLVMeta AMF String Processing amf.c amf_string_new heap-based overflow5.3 Medium- d-link dsm-g600D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write8.7 High
- valkey-io valkeyvalkey-io valkey Module Timer module.c moduleTimerHandler double free4.8 Medium
- valkey-io valkeyvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free2.1 Low
- o6 automation gmbh open62541open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free6.9 Medium
- systerel s2opcSysterel S2OPC subscription_mgr.c use after free5.3 Medium
- systerel s2opcSysterel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds5.3 Medium
- totolink nr1800xTOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow9.4 Critical
- kamailioKamailio AVP cxdx_avp.c get_4bytes out-of-bounds5.3 Medium
- No product listedLatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption4.8 Medium
- d-link dir-825mD-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow9.4 Critical
- d-link dir-825mD-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow9.4 Critical
- open asset import library assimpOpen Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow4.8 Medium
- No product listedOpen5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption5.3 Medium
- tenda hg10Tenda HG10 Boa Web Server formIPv6Routing buffer overflow10.0 Critical
- totolink a720rTOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption9.4 Critical
- nasa cfsNASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow5.3 Medium
- Show moreLoading…