CWE-119: Buffer Overflow
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
Also known as Improper Restriction of Operations within the Bounds of a Memory Buffer, buffer overrun, memory safety.
A kind of CWE-118 Incorrect Access of Indexable Resource.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeMemory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- apple macosA buffer overflow was addressed with improved size validation. This issue is fixed in macOS...5.5 Medium
gpacUbuntuA buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project...5.5 Medium- h3c magic nx15H3C Magic NX15 usrlist sub_416874 stack-based overflow7.1 High
- ztxz16 fastllmztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow5.3 Medium
- ztxz16 fastllmztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow5.3 Medium
- michaelrsweet mxmlmichaelrsweet mxml mxml-file.c mxml_load_data use after free5.1 Medium
- tencent ncnnTencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds5.3 Medium
- artifex mupdfArtifex MuPDF Signature Locking pdf-xref.c free_char_list double free5.3 Medium
gpacUbuntuA segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5...5.5 Medium- google chromeMemory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...4.3 Medium
- google chromeMemory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...4.3 Medium
- google chromeMemory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...8.8 High
- wavlink wn530hg4bWavlink WN530HG4B api.cgi heap-based overflow10.0 Critical
- unitronics unistream pro/unilogicUnitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer8.3 High
- ggml-org whisper.cppggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds2.4 Low
praatDebianPraat Model Loader whisper.cpp whisper_model_load out-of-bounds write5.3 Medium- turboderp exllamav2turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow5.3 Medium
- oaid tengineOAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds5.3 Medium
- opensipsOpenSIPS rtpproxy rtpproxy_answer out-of-bounds6.9 Medium
- pcman ftp serverPCMan FTP Server PORT buffer overflow6.9 Medium
gpacUbuntuGPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write5.3 Medium- xenXenstore: Guests can crash xenstored during Live Update5.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Layout component5.4 Medium
- trendnet tew-432brpTRENDnet TEW-432BRP formTcpipSetup stack-based overflow9.4 Critical
- wavlink wl-wn530be1-aWavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow10.0 Critical
- tiiny-ai powerinferTiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds4.8 Medium
- tiiny-ai powerinferTiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds4.8 Medium
- k2-fsa sherpa-onnxk2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow5.3 Medium
jsmnDebian,ntpAzure Linux +1 moreBuffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause...3.7 Low- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Editor component8.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Layout component8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D component5.4 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine: JIT component5.4 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine component8.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine component8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Networking component9.6 Critical
- ibm powervm hypervisorIBM Power Systems Firmware Improper Memory Buffer Restriction8.2 High
- edimax br-6208acEdimax BR-6208AC formWlanMP buffer overflow9.4 Critical
- edimax br-6208acEdimax BR-6208AC formWlSiteSurvey buffer overflow9.4 Critical
- netcore nr268Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds8.6 High
- linksys e1700Linksys E1700 setVlan stack-based overflow9.4 Critical
- linksys e1700Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow10.0 Critical
- kamailioKamailio sipt ss7_parser.c isup_get_calling_party buffer overflow6.9 Medium
- open asset import library assimpOpen Asset Import Library Assimp PLY File getNextBlock out-of-bounds5.1 Medium
gpacUbuntuGPAC MP4Box filter_queue.c gf_fq_pop use after free5.3 Medium- Show moreLoading…