CWE-131: Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- signalwire freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding 8.2 High
- signalwire freeswitch FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication 7.5 High
- asterisk, asterisk certified-asterisk +1 more Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 6.0 Medium
- watchguard fireware os Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution 9.2 Critical
- watchguard fireware os Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution 9.2 Critical
- qt Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt 1.9 Low
- libyal libphdi libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path 6.9 Medium
- rt-labs ab soem Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers 8.8 High
- tianocore edk2 Pre-boot RCE in EDK II PXE driver 9.5 Critical
- eclipse foundation threadx Module queue front-send validates a word count as a byte count 4.8 Medium
- libmng libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr 6.9 Medium
- nasa fprime F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge 6.5 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed 8.7 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more Dpdk: dpdk: double offset bug in vhost log mapping calculation 7.8 High
- imagemagick ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash 5.3 Medium
- vyperlang vyper Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments 8.2 High
- zcashfoundation zebra Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate 6.3 Medium
- tonycoz imager Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp 6.3 Medium
- nvidia geforce, rtx, quadro, nvs, tesla +1 more +3 more NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an... 7.8 High
- eclipse foundation guix `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it... 5.9 Medium
- qt for mcus Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs 8.8 High
- altera trusted firmware Unit Confusion in VAB Authentication 8.3 High
- No product listed An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(... 7.5 High
- red hat hardened images Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow 7.5 High
- happyseafox sail SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write) 7.8 High
- freerdp FreeRDP before 3.31.0 Integer Overflow via audin Apple backends 5.3 Medium
- arduino-libraries arduinoble ArduinoBLE: Memory corruption via malformed ATT write request 7.2 High
- eprosima fast-dds Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage 9.1 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows iSCSI Remote Code Execution Vulnerability 8.8 High
- strukturag libheif libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image) 4.0 Medium
- openvpn An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1... 5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 more Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 7.5 High
- ibm aix, powervm vios, vios +2 more Vulnerabilities in IBM AIX and PowerVM VIOS 7.5 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Popt-devel: popt-static: short realloc in poptconfigfiletostring 2.5 Low
- wazuh Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path 5.3 Medium
- sonos tract sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size 5.3 Medium
- rsyncproject rsync rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() 8.3 High
- linux drop_monitor: fix size calculations for 64-bit attributes 7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 more Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c) 7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +6 more +8 more Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c) 7.3 High
- academysoftwarefoundation openimageio OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write 7.6 High
- apache nimble Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler 6.5 Medium
- ffmpeg FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing 8.5 High
- ffmpeg FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame() 7.3 High
- linux, linux kernel +1 more drm/msm/snapshot: fix dumping of the unaligned regions 7.7 High
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 more PAN-OS: IPv6 Firewall Policy Bypass 1.7 Low
- linux, linux kernel +1 more ipv4: account for fraggap on the paged allocation path 7.8 High
-
jxl-oxidecrates.io jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow 6.2 Medium - ruby json Ruby JSON: JSON generator heap buffer overflow when streaming to an IO 3.7 Low
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 7.8 High
- Show olderLoading…