CWE-131: Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- iced-x86 project iced-x86Incorrect buffer size calculation in iced-x869.8 Critical
- google tensorflowSegfault in SparseCountSparseOutput2.5 Low
- google tensorflowHeap OOB and null pointer dereference in `RaggedTensorToTensor`5.3 Medium
- google tensorflowHeap buffer overflow caused by rounding2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedMul`2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedReshape`2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedResizeBilinear`2.5 Low
- google tensorflowHeap buffer overflow in `StringNGrams`2.5 Low
- google tensorflowHeap buffer overflow in `SparseTensorToCSRSparseMatrix`2.5 Low
- linux kernel, canonical ubuntu linux +1 moreLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Remote code execution vulnerability in overlayd service9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the SGI format buffer size processing...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of...8.1 High
- linux kernel, xen, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less...6.5 Medium
- rand core project coreIncorrect check on buffer length in rand_core9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the PSD Header processing functionality of...9.8 Critical
- softmaker office textmaker 2021In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted...8.8 High
- microsoft defender, security essentials, system center 2012 endpoint protection +3 more +5 moreMicrosoft Defender Remote Code Execution Vulnerability7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +341 more +343 moreMemory corruption due to ioctl command size was incorrectly set to the size of a pointer and not...7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +38 more +40 moreWindows Kernel Local Elevation of Privilege Vulnerability7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.5.3 Medium
- f2fs-tools project f2fs-toolsAn exploitable information disclosure vulnerability exists in the init_node_manager functionality...4.4 Medium
- f2fs-tools project f2fs-toolsAn exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of...8.2 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable vulnerability exists in the object stream parsing functionality of Nitro Software,...8.8 High
- gonitro nitro pro, nitro pro +1 moreAn arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata...5.5 Medium
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +10 more +12 moreu'Resizing the usage table header before passing all the checks leads to the function exiting...7.8 High
- f2fs-tools project f2fs-tools, fedoraproject fedora +1 moreAn exploitable code execution vulnerability exists in the file system checking functionality of...6.7 Medium
- riot-os riotRIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode()...9.8 Critical
- crossbeam-channel project crossbeam-channelIncorrect buffer size in crossbeam-channel5.5 Medium
- crossbeam-rs crossbeamUndefined Behavior in bounded Crossbeam channel8.1 High
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS...9.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +8 more +10 moreOut of bound memory access while processing qpay due to not validating length of the response...7.8 High
- siemens openpcs 7 v8.1, openpcs 7 v8.2, openpcs 7 v9.0 +25 more +27 moreA vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All...7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreWhile processing MT Secondary PDP request, Buffer overflow will happen due to incorrect...9.8 Critical
- qualcomm ips, qualcomm, inc. postscript and pdf printers that use ips versions prior to 2019.2, hp 2dr21d firmware +40 more +42 moreInteger overflow to buffer overflow vulnerability in PostScript image handling code used by the...9.8 Critical
- nvidia virtual gpu manager, vgpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an...5.5 Medium
- tcpdump libpcaprpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a...5.3 Medium
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 Low
- facebook fizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an...7.5 High
- atlantiswordprocessor atlantis word processorAn exploitable arbitrary write vulnerability exists in the open document format parser of the...8.8 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 High
- godotengine godotGodot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a...7.5 High
- google androidIn writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a...7.8 High
- gnu binutilsprocess_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- google androidA remote code execution vulnerability in the Android media framework (libavc). Product: Android....7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could...7.0 High
- microsoft corporation ldap, microsoft windows 10, windows 7 +6 more +8 moreAn elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are...8.1 High
- Show moreLoading…