CWE-131: Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows6.5 Medium
- eclipse omrIn the Eclipse OMR port library component since release 0.2.0, an API function to return the...6.9 Medium
- opencryptokiopenCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP6.6 Medium
- color iccdeviccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray6.1 Medium
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Remote Code Execution Vulnerability8.8 High
- aiscatcher ais-catcherAIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCE9.3 Critical
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb device4.8 Medium
- qualcomm apq8064au firmware, csr8811 firmware, immersive home 214 platform firmware +93 more +95 moreIncorrect Calculation of Buffer Size in SCE-Mink8.8 High
- ibm db2 high performance unload, db2 high performance unload load +1 moreFixes to common vulnerabilities found in IBM Db2 High Performance Unload6.5 Medium
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 moreIncorrect Calculation of Buffer Size in HLOS7.8 High
- imagemagickImageMagick BlobStream Forward-Seek Under-Allocation3.8 Low
- espressif esp-idfESF-IDF BluFi Example Memory Overflow Vulnerability5.2 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart7.1 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +342 more +344 moreIncorrect Calculation of Buffer Size in Video7.8 High
- openvm-org openvmOpenVM byte decomposition of pc in AUIPC chip can overflow7.8 High
- quickjs project quickjsquickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading...5.6 Medium
- imagemagickIn multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled ...2.9 Low
- imagemagick, debian linux +1 moreIn MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after...2.9 Low
- openbsdOpenBSD wg(4) kernel crash7.1 High
- php, netapp ontap +1 moreStream HTTP wrapper truncates redirect location to 1024 bytes6.3 Medium
- paragon software backup and recovery, disk wiper, drive copy +9 more +11 moreCVE-2025-02887.8 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +12 more +14 moreWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate...6.2 Medium
- schneider electric bmenor2200h, evlink pro ac, modicon m580 cpu (part numbers bmep* and bmeh*, excluding m580 cpu safety) +1 more +3 moreCWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of...8.7 High
- silabs.com wiseconnect sdkDoS caused due to wrong hash length returned for SHA2/224 algorithm7.5 High
- f5 access for android, google android +1 moreIn writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to...7.8 High
- justdan96 tsmuxerA negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause...6.5 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet...5.3 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix incorrect size calculation for loop7.8 High
- linux, linux kernel +1 morebinfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined5.5 Medium
- gallagher controller 6000 and controller 7000Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP...4.6 Medium
- freebsdMultiple vulnerabilities in libnv7.5 High
- linux, linux kernel +1 moreASoC: Intel: sof-nau8825: fix module alias overflow5.5 Medium
- linux, linux kernel +1 moreriscv, bpf: Fix out-of-bounds issue when preparing trampoline image7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/i915/gem: Fix Virtual Memory mapping boundaries calculation7.8 High
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +17 more +19 moreCODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service8.7 High
- debian linux, linux kernel +1 morel2tp: pass correct message length to ip6_append_data5.5 Medium
- linux, linux kernel +1 moredrm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address5.5 Medium
- openbsdOpenBSD 7.4 and 7.3 m_split() network buffer kernel crash7.5 High
- openbsdOpenBSD 7.3 invalid l2tp message npppd crash7.5 High
- google androidIn wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic...5.5 Medium
- lexmark various, 6500e, c746 +65 more +67 moreA vulnerability has been identified in the PostScript interpreter in various Lexmark devices.9.0 Critical
- linux, linux kernel +1 moremedia: staging/intel-ipu3: Fix set_fmt error handling7.8 High
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...9.8 Critical
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreF5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability7.5 High
- silabs gecko software development kit, silabs.com gsdk +1 moreIncorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow7.5 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: integer overflow in __vsyslog_internal()5.3 Medium
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow10.0 Critical
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation License Server Buffer Overflow10.0 Critical
- freebsdlibc stdio buffer overflow9.8 Critical
- Show moreLoading…