← Back
CWE-119

14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,074)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.
1Tendacn
1Ac10u Firmware
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.
1Accusoft
1Imagegear
Jun 17, 2026
Sep 25, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious fi...Show more
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Accusoft
1Imagegear
Jun 17, 2026
Sep 25, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to...Show more
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Accusoft
1Imagegear
Jun 17, 2026
Sep 25, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file...Show more
A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Nvidia
1Dgx H100 Firmware
Jun 17, 2026
Sep 20, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel co...Show more
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information disclosure, and data tampering.Show less
1Siemens
1Tecnomatix
Jun 17, 2026
Sep 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corrup...Show more
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.Show less
1Panasonic
1Kw Watcher
Jun 17, 2026
Sep 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.
1Qualcomm
25Fastconnect 6800 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
1Qualcomm
220315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+217 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
1Qualcomm
38Aqt1000 Firmware
Qca6420 FirmwareQca6430 Firmware+35 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption while accessing metadata in Display.
1Qualcomm
56Apq8096au Firmware
Aqt1000 FirmwareMdm9150 Firmware+53 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Audio during playback session with audio effects enabled.
1Aomedia
1Aomedia
Jun 17, 2026
Aug 29, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
1Xmlsoft
1Libxml2
Jun 17, 2026
Aug 29, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a cr...Show more
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.Show less
1Varnish Software
2Varnish Enterprise
Vmod Digest
Jun 17, 2026
Aug 23, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the...Show more
libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use.Show less