CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Networking component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Safe Browsing component8.0 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Security: Process Sandboxing component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Editor component9.3 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Memory component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.0 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the WebRTC component9.6 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Animation component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Networking: HTTP component9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Graphics component9.6 Critical
gpacUbuntuGPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption5.3 MediumgpacUbuntuGPAC base_scenegraph.c gf_node_activate_ex stack-based overflow2.4 LowgpacUbuntuGPAC base_scenegraph.c gf_node_get_name_and_id use after free5.3 MediumgpacUbuntuGPAC URL url.c gf_url_concatenate_ex heap-based overflow2.4 LowgpacUbuntuGPAC Compositor media_object.c gf_mo_get_od_id use after free6.9 MediumgpacUbuntuGPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow5.3 Medium- d-link di-8300D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow9.4 Critical
- d-link di-8400D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow9.4 Critical
- luben zstd-jniluben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free6.9 Medium
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free4.8 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds2.4 LowgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_unregister use after free4.8 MediumgpacUbuntuGPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow4.8 Medium- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and...7.5 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS...7.8 High
- apple ipados, macos, ios and ipados +2 more +4 moreA memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate...6.6 Medium
- ffmpegFFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds5.3 Medium
gpacUbuntuGPAC MP4Box vrml_tools.c gf_sg_script_load use after free5.3 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_get_name use after free5.3 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_unregister use after free5.3 Medium- marcobambini gravitymarcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds5.1 Medium
- marcobambini gravitymarcobambini Gravity JSON parser gravity_json.c memory corruption5.3 Medium
- No product listedOpen5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free6.9 Medium
- memcachedmemcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds6.9 Medium
- d-link dir-878D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow9.4 Critical
- d-link dir-878D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow9.4 Critical
- tenda w20eTenda W20E formDelWebAuthWhiteUser stack-based overflow8.7 High
- tenda w20eTenda W20E HTTP formIPMacBindAdd stack-based overflow7.1 High
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free5.3 MediumgpacUbuntuGPAC MP4Box loader_bt.c gf_bt_report memory corruption6.9 Medium- matthias-wandel jheadMatthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow4.8 Medium
- matthias-wandel jheadMatthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds4.8 Medium
- d-link dir-823gD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow9.4 Critical
- Show moreLoading…