CWE-805: Buffer Access with Incorrect Length Value
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- cisco nx-os software, nx-os, firepower extensible operating system (fxos) +4 more +6 moreA vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and...6.6 Medium
- siemens simatic s7-400 cpu 412-2 pn v7, simatic s7-400 cpu 414-3 pn/dp v7, simatic s7-400 cpu 414f-3 pn/dp v7 +15 more +17 moreA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU...7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +23 more +25 moreNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability8.6 High
- dell alienware m15 a6 firmware, alienware m15 ryzen edition r5 firmware, alienware m17 ryzen edition r5 firmware +13 more +15 moreDell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A...5.1 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreOut-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare27.6 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreBuffer Access with Incorrect Length Value in radareorg/radare26.3 Medium
- siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +32 more +34 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...7.5 High
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyr7.0 High
- vyperlang vyperVyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies6.3 Medium
- linux kernelA memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the...5.5 Medium
- wibu codemeterMultiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where...9.8 Critical
- gallagher command centreIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command...7.5 High
- redhat enterprise linux, red hat kpatch:, redhat enterprise linux eus +2 moreIt was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix...6.5 Medium