CWE-823: Use of Out-of-range Pointer Offset
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
Also known as Untrusted pointer offset.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- imagination technologies graphics ddk GPU DDK - OOB write in UntwiddlePOTSquare64bpp 8.8 High
- imagination technologies graphics ddk GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB 9.8 Critical
- watchguard fireware os Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service 7.2 High
- mutt Use of Out-of-range Pointer Offset in mutt 2.5 Low
- tp-link systems inc. tapo c500 v2.0 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500 7.1 High
- eclipse foundation threadx An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at... 8.5 High
- the tcpdump group libpcap OOBR in libpcap before 1.10.7 5.5 Medium
- imagination technologies graphics ddk GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers 7.8 High
- elastic elasticsearch Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process 8.8 High
- openslide OpenSlide: Arbitrary memory write with crafted Ventana BIF file 7.7 High
- imagination technologies graphics ddk GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem 7.1 High
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() 7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation 7.7 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Memory safety bug fixed in Thunderbird 152 8.1 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 more netfilter: nft_inner: Fix IPv6 inner_thoff desync 9.1 Critical
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr() 4.3 Medium
- mediaarea mediainfolib MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability 7.8 High
- f5 dos, nginx open source, nginx plus +4 more +6 more NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability 8.3 High
- uuidjs uuid Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided 3.2 Low
- uuidjs uuid uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided 8.1 High
- nvidia snap-4 container NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious... 6.8 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 more Incorrect boundary conditions in the Audio/Video: Playback component 7.5 High
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation 9.6 Critical
- pseitz lz4 flex, red hat logging subsystem for red hat openshift 6.2, logging subsystem for red hat openshift 6.4 +7 more +9 more lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer 8.2 High
- cisco adaptive security appliance software, secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 more +3 more A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD... 6.1 Medium
- qnap qsync central Qsync Central 1.3 Low
- vb-audio software matrix, matrix coconut, voicemeeter banana +2 more +4 more VB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl Length 6.8 Medium
- color iccdev iccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation 6.1 Medium
- ucancode.net software e-xd++ visualization enterprise suite UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE 8.6 High
- isc kea Invalid characters cause assert 7.5 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 more Use of Out-of-range Pointer Offset in DSP Service 7.8 High
- qualcomm immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware +23 more +25 more Use of Out-of-range Pointer Offset in TZ Firmware 8.8 High
- imagination technologies graphics ddk GPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist 7.8 High
- qualcomm sdm429w firmware, snapdragon 429 mobile platform firmware, wcn3620 firmware +2 more +4 more Use of Out-of-range Pointer Offset in Camera Driver 6.6 Medium
- https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh Misaligned Memory Accesses in `is_openvpn_protocol()` 6.9 Medium
- imagination technologies graphics ddk GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups) 6.5 Medium
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +56 more +58 more Use of Out-of-range Pointer Offset in Camera Driver 6.6 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write 8.2 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +59 more +61 more Use of Out-of-range Pointer Offset in Trust Management Engine 7.8 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +39 more +41 more Use of Out-of-range Pointer Offset in Automotive Audio 7.8 High
- imagination technologies graphics ddk GPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet 7.3 High
- imagination technologies graphics ddk GPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write 7.8 High
- imagination technologies graphics ddk GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex 3.3 Low
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2073 firmware +8 more +10 more Use of Out-of-range Pointer Offset in WLAN Windows Host 7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +22 more +24 more Use of Out-of-range Pointer Offset in Display 7.8 High
- imagination technologies graphics ddk GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes 7.8 High
- imagination technologies graphics ddk GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write 7.8 High
- imagination technologies graphics ddk GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore 6.7 Medium
- imagination technologies graphics ddk GPU DDK - rgxfw_hwperf_config OOB read & write 4.4 Medium
- Show olderLoading…