Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28587 1Qualcomm 184315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+181 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
CVE-2023-28586 1Qualcomm 307315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+304 more Jun 17, 2026 Dec 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
CVE-2023-28585 1Qualcomm 275315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+272 more Jun 17, 2026 Dec 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28551 1Qualcomm 242315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+239 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28550 1Qualcomm 329315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+326 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-21634 1Qualcomm 50Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+47 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
CVE-2023-45168 1Ibm 2Aix Vios Jun 17, 2026 Dec 1, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966.
CVE-2023-49701 1Asrmicro 2Asr1803 Firmware Asr1806 Firmware Jun 17, 2026 Nov 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory Corruption in SIM management while USIMPhase2init
CVE-2023-49699 1Asrmicro 2Asr1803 Firmware Asr1806 Firmware Jun 17, 2026 Nov 30, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in IMS while calling VoLTE Streamingmedia Interface
CVE-2023-41139 1Autodesk 10Autocad Autocad Advance SteelAutocad Architecture+7 more Oct 8, 2026 Nov 23, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the...Show more A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. Show less
CVE-2023-29076 1Autodesk 10Autocad Autocad Advance SteelAutocad Architecture+7 more Jun 17, 2026 Nov 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to...Show more A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. Show less
CVE-2021-38405 1Siemens 2Jt2go Teamcenter Visualization Jun 17, 2026 Nov 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context...Show more The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2023-47580 1Fujielectric 2Tellus Tellus Lite Jun 17, 2026 Nov 15, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9...Show more Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed. Show less
CVE-2023-22313 1Intel 3Qat Driver Firmware Quickassist Technology Driver FirmwareQuickassist Technology Library Jun 17, 2026 Nov 14, 2023 N/A· v4 2.3 LOW· v3 N/A· v2 Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.
CVE-2022-29510 1Intel 36Compute Module Hns2600bp Firmware Compute Module Hns2600bpb24 FirmwareCompute Module Hns2600bpb24r Firmware+33 more Jun 17, 2026 Nov 14, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-46748 2Amd Intel 6Radeon Pro Vega 56 Firmware Radeon Pro Vega 64 FirmwareRadeon Rx Vega 56 Firmware+3 more Jun 17, 2026 Nov 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
CVE-2023-36033 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-31247 2Silabs Weston Embedded 3Cesium Net Gecko Software Development KitUc Http Jun 17, 2026 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a mal...Show more A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2023-28391 2Silabs Weston Embedded 3Cesium Net Gecko Software Development KitUc Http Jun 17, 2026 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious...Show more A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2023-28379 2Silabs Weston Embedded 3Cesium Net Gecko Software Development KitUc Http Jun 17, 2026 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious...Show more A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.Show less

Previous 1...144145146...734 Next