CWE-119
14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,074)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 68Ar8035 Firmware Qca6174a FirmwareQca6310 Firmware+65 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR...Show more |
3Redhat WebkitgtkWpewebkit23Codeready Linux Builder Codeready Linux Builder EusCodeready Linux Builder For Arm64 Eus+20 moreJun 17, 2026 Mar 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issu...Show more |
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing mal...Show more |
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges. |
1Intel 1Media Software Development Kit Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash. |
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corrupt...Show more |
1Siemens 2Jt Open Toolkit Jt UtilitiesJun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT f...Show more |
1Qualcomm 42Apq8096au Firmware Aqt1000 FirmwareMsm8996au Firmware+39 moreJun 17, 2026 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id. |
1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 moreJun 17, 2026 Feb 10, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform ar...Show more |
1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 moreJun 17, 2026 Feb 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause a denial...Show more |
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.
|
1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Lack of verification in B&R APROL
Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
|
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio...Show more |
Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privileg...Show more |
1Trendnet 1Tew 811dru Firmware Jun 17, 2026 Feb 2, 2023 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. This affects an unknown part of the file wan.asp of the component Web Management Interface. The manipulation leads to memory c...Show more |
A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory co...Show more |
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipul...Show more |