Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4491 1Easy Address Book Web Server Project 1Easy Address Book Web Server Jun 17, 2026 Oct 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a...Show more Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.Show less
CVE-2023-3024 1Silabs 1Gecko Software Development Kit Jun 17, 2026 Sep 29, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.
CVE-2023-20251 1Cisco 1Mobility Express Software Jun 17, 2026 Sep 27, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This v...Show more A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients connecting under specific conditions. An attacker could exploit this vulnerability by causing multiple wireless clients to attempt to connect to an access point (AP) on an affected device. A successful exploit could allow the attacker to cause the affected device to reboot after a significant amount of time, resulting in a denial of service (DoS) condition.Show less
CVE-2023-44023 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-44022 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-44021 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44020 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVE-2023-44019 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
CVE-2023-44018 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
CVE-2023-44017 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVE-2023-44016 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVE-2023-44015 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
CVE-2023-44014 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.
CVE-2023-44013 1Tendacn 1Ac10u Firmware Jun 17, 2026 Sep 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.
CVE-2023-35002 1Accusoft 1Imagegear Jun 17, 2026 Sep 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious fi...Show more A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2023-32284 1Accusoft 1Imagegear Jun 17, 2026 Sep 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to...Show more An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2023-23567 1Accusoft 1Imagegear Jun 17, 2026 Sep 25, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file...Show more A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2023-25527 1Nvidia 1Dgx H100 Firmware Jun 17, 2026 Sep 20, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel co...Show more NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information disclosure, and data tampering.Show less
CVE-2023-41846 1Siemens 1Tecnomatix Jun 17, 2026 Sep 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corrup...Show more A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-3471 1Panasonic 1Kw Watcher Jun 17, 2026 Sep 6, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.

Previous 1...146147148...734 Next