CWE-131: Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet: pull headers in qdisc_pkt_len_segs_init()8.4 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Critical
- freerdpFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode7.5 High
- f5 nginx open source, nginx plus, dos +14 more +16 moreNGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability9.2 Critical
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilation5.4 Medium
- openvpn ovpn-dco-winAn incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2...5.6 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreMicrosoft Windows VMSwitch Denial of Service Vulnerability5.5 Medium
- freeswitchFreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read9.8 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreIncorrect boundary conditions in the Graphics: Text component7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 High
- tirr-c jxl-grid, jxl-oxide +1 morejxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms7.3 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH grows9.8 Critical
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreHeap overflow with multiple NSID, COOKIE, PADDING EDNS options8.7 High
- imagemagickImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression5.5 Medium
- rust-openssl, sfackler openssl +1 morerust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers5.1 Medium
- f5 nginx open source, nginx plus, dos +26 more +28 moreNGINX ngx_http_rewrite_module vulnerability9.2 Critical
- f5 big-ip, big-ip next cnf, big-ip next for kubernetes +24 more +26 moreBIG-IP SSL/TLS vulnerability8.7 High
- linux, linux kernel +1 moredrm/v3d: Set DMA segment size to avoid debug warnings5.5 Medium
- vllmvLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters6.5 Medium
- linux, linux kernel +1 moreASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls7.8 High
- linux, linux kernel +1 morexfrm: account XFRMA_IF_ID in aevent size calculation5.5 Medium
- red hat enterprise linux 6, hardened images, vda-linux busybox mirror +2 moreBusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS7.2 High
- deltaww as320t, as320t firmware +1 moreIncorrect calculation of buffer size on the stack in AS320T9.8 Critical
- linux, linux kernel +1 moreksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()9.8 Critical
- noir-lang noirBrillig: Heap corruption in foreign call results with nested tuple arrays9.3 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC component7.3 High
- xiangshan nemuNEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in...7.5 High
- rust-opensslrust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.17.2 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via crafted pvr image file5.5 Medium
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIs6.9 Medium
- libraw, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreA heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of...9.8 Critical
- go-jose, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift +110 more +112 moreGo JOSE affect by a panic in JWE decryption7.5 High
- freerdpFreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write7.1 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write7.5 High
- freerdpFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read5.9 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- nvidia snap-4 containerNVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker...6.8 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs component7.5 High
- pixarra twistedbrush pro studioTwistedBrush Pro Studio 24.06 Script Recorder Denial of Service6.9 Medium
- ruby zlibzlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption1.7 Low
- htslibHTSlib BGZF index file reader has a heap buffer overflow7.1 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Critical
- imagemagickImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer6.8 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +1 more +3 moreA vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange...7.7 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- openvpn ovpn-dco-winBuffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by...5.6 Medium
- hdfgroup hdf5, red hat enterprise linux ai (rhel ai) 3 +1 moreHDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +11 more +13 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…