CWE-119
14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,074)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
4Debian LinuxNetapp+1 more8Debian Linux Enterprise LinuxH300s Firmware+5 moreJun 17, 2026 Aug 24, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal informat...Show more |
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. |
2Artifex Debian2Debian Linux GhostscriptJun 17, 2026 Aug 19, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the hea...Show more |
1Intel 2Lapbc510 Firmware Lapbc710 FirmwareJun 17, 2026 Aug 18, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access. |
1Intel 2Lapbc510 Firmware Lapbc710 FirmwareJun 17, 2026 Aug 18, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access. |
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. |
libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. |
1Intel 9Proset Wi Fi 6e Ax210 Firmware Wi Fi 6 Ax200 FirmwareWi Fi 6 Ax201 Firmware+6 moreJun 17, 2026 Aug 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access. |
1Intel 18Dual Band Wireless Ac 3165 Firmware Dual Band Wireless Ac 3168 FirmwareDual Band Wireless Ac 8260 Firmware+15 moreJun 17, 2026 Aug 18, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable escalation of privilege vi...Show more |
1Intel 18Dual Band Wireless Ac 3165 Firmware Dual Band Wireless Ac 3168 FirmwareDual Band Wireless Ac 8260 Firmware+15 moreJun 17, 2026 Aug 18, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via loca...Show more |
A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. |
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. |
The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA. |
An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provi...Show more |
1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 moreJun 17, 2026 Aug 4, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate au...Show more |
1Patlite 2Nhl Fb2 Firmware Nhp Fb2 FirmwareJun 17, 2026 Jul 27, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of serv...Show more |
A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to...Show more |
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba. |
1Schneider Electric 2Opc Ua Module For M580 Firmware X80 Advanced Rtu Module FirmwareJun 17, 2026 Jul 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service when parsing the URL. Affected Products: X80 advanced RTU Communication Module (B...Show more |
'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writabl...Show more |