CWE-805: Buffer Access with Incorrect Length Value
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- huawei harmonyos OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this... 5.9 Medium
- cisco open source snort3, secure firewall threat defense (ftd) software, utd snort ips engine software +2 more Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability 5.8 Medium
- nasa fprime F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry 6.5 Medium
- ami aptiov UEFI OOB Write and Buffer Overflow Vulnerabilities 8.3 High
- cisco secure firewall threat defense (ftd) software Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability 5.8 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: gimp: remote code execution via crafted paa file 5.5 Medium
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 6 +7 more +9 more Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header 3.9 Low
- djangoproject django Heap buffer over-read in GDALRaster 6.3 Medium
- linux, linux kernel, red hat codeready linux builder eus (v.9.6) +40 more +42 more crypto: ccp - copy IV using skcipher ivsize 7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver 4.8 Medium
- cato networks socket Socket versions before 2.041 for Perl have an out-of-bounds heap read 9.1 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 more Incorrect boundary conditions in the Audio/Video: Playback component 9.8 Critical
- No product listed An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of... 7.5 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 more usbip: validate number_of_packets in usbip_pack_ret_submit() 9.8 Critical
- samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 more In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... 7.4 High
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Sssd: out-of-bounds read in the sssd 5.5 Medium
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 more Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 6.1 Medium
-
libcrux-poly1305crates.io libcrux Panics During Standalone MAC Operations 8.7 High - freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more FreeRDP has Out-of-bounds Write 8.8 High
- cisco nx-os system software in aci mode Cisco NX-OS Software Denial of Service Vulnerability 7.4 High
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 more Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability 7.4 High
- google libjxl, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2 8.7 High
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 more Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags 5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 more Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files. 5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Libsoup: out-of-bounds read in libsoup websocket frame processing 4.8 Medium
- arista networks eos On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain… 5.3 Medium
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 more Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 more Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 more Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 more Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 7.3 High
- cisco cyber vision, secure firewall threat defense (ftd) software +1 more Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability 5.8 Medium
- cisco ios xe software, ios xe +1 more A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE... 8.6 High
- dell idrac service module (ism), emc idrac service module +1 more Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with... 7.8 High
- nvidia triton inference server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python... 8.1 High
- nvidia triton inference server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python... 8.1 High
- cisco ios xe, ios xe software +1 more A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated,... 7.4 High
- cisco nx-os software, wireless lan controller (wlc) +1 more Multiple Cisco Products Denial of Service Vulnerability 7.4 High
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash 8.7 High
- juniper junos, juniper networks junos os +1 more Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash 7.1 High
- cisco ios xe software, ios, ios xe +2 more A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... 7.7 High
- cisco ios xe software, ios, ios xe +2 more A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... 7.7 High
- cisco ios xe software, ios, ios xe +2 more A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... 7.7 High
- cisco ios xe software, ios, ios xe +2 more A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... 7.7 High
- nvidia gpu display driver, vgpu software NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user... 4.4 Medium
- open-quantum-safe oqs-provider, open quantum safe oqs provider +1 more Buffer overflow in deserialization in oqs-provider 8.2 High
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 more A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buf… 7.5 High
- eclipse openj9, eclipse foundation open j9 +1 more Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer 5.3 Medium
- open5gs Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS... 5.3 Medium
- honeywell experion server Server receiving a malformed message creates connection for a hostname that may cause a stack... 7.4 High
- openbsd OpenBSD 7.3 invalid l2tp message npppd crash 7.5 High
- Show olderLoading…