CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component9.6 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback component8.1 High
- faststone image viewerFastStone Image Viewer PCX Decoder out-of-bounds5.3 Medium
- faststone image viewerFastStone Image Viewer TGA Image FSViewer.exe out-of-bounds5.3 Medium
- faststone image viewerFastStone Image Viewer 1bpp RLE Decoder out-of-bounds write5.3 Medium
- faststone image viewerFastStone Image Viewer TGA Image out-of-bounds write5.3 Medium
- d-link di-8400D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow9.4 Critical
- netcore nr289-geNetcore NR289-GE Authentication boa password-check stack-based overflow9.3 Critical
- fast fac1900rFAST FAC1900R devdiscover Service copy_msg_element stack-based overflow10.0 Critical
- fast fac1200rFAST FAC1200R MmtAtePrase stack-based overflow9.4 Critical
- fast fac1200rFAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow9.4 Critical
- automattic mongooseCesanta Mongoose MQTT Broker main.c fn stack-based overflow6.9 Medium
- No product listedEyeplus p2pcam HTTP stack-based overflow8.7 High
- aligungr ueransimaligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption6.9 Medium
- trusted domain project opendkimTrusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write6.9 Medium
- citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 moreMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service8.8 High
- citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 moreMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service8.8 High
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 moreMemory overflow vulnerability leading to Remote Code Execution or Denial of Service9.5 Critical
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 moreA remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands9.5 Critical
- edimax br-6428ncEdimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow5.3 Medium
- d-link dir-895lD-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write9.4 Critical
- altera trusted firmwareUnvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.8.3 High
- d-link dir-825D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write9.3 Critical
- fast fac1900rFast FAC1900R uhttpd get_alias_name stack-based overflow5.3 Medium
- fast fac1203r gigabit editionFast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow10.0 Critical
- moore threads mtt s80 driver packageMoore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow9.3 Critical
- biostar bios update utilityBioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where9.3 Critical
- biostar temperature monitor utilityBioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where9.3 Critical
- biostar valkyrie auroraBioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where9.3 Critical
- biostar vivid led djBioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where9.3 Critical
- netcore nbr200v2Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow9.4 Critical
- netcore nbr200v2Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow9.4 Critical
- d-link dir-868lD-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow10.0 Critical
- comfast cf-n1-sComfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow10.0 Critical
- kamailioKamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow6.9 Medium
- totolink a3002muTotolink A3002MU formWlWds buffer overflow10.0 Critical
- totolink a3002muTotolink A3002MU formWlEncrypt buffer overflow10.0 Critical
- totolink a3002muTotolink A3002MU formWlAc buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU formSchedule buffer overflow9.4 Critical
gpacUbuntuGPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds6.9 Medium- No product listedvgmstream EA SCHl parser vadpcm_decoder.c vadpcm_read_coefs_be out-of-bounds write5.3 Medium
- cisco identity services engine softwareCisco Identity Services Engine RADIUS Denial of Service Vulnerability8.6 High
gpacUbuntuGPAC downloader.c wait_for_header_and_parse out-of-bounds4.8 MediumgpacUbuntuGPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free4.8 MediumgpacUbuntuGPAC BIFS commands.c gf_sg_command_del use after free4.8 MediumgpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free4.8 MediumgpacUbuntuGPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow6.9 Medium- pdfforge pdf architectpdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- originlab origin viewerOriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- Show moreLoading…