Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28581 1Qualcomm 25Fastconnect 6800 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more Jun 17, 2026 Sep 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVE-2023-28549 1Qualcomm 220315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+217 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-21663 1Qualcomm 38Aqt1000 Firmware Qca6420 FirmwareQca6430 Firmware+35 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while accessing metadata in Display.
CVE-2023-21654 1Qualcomm 56Apq8096au Firmware Aqt1000 FirmwareMdm9150 Firmware+53 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio during playback session with audio effects enabled.
CVE-2023-39616 1Aomedia 1Aomedia Jun 17, 2026 Aug 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
CVE-2023-39615 1Xmlsoft 1Libxml2 Oct 15, 2026 Aug 29, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a cr...Show more Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.Show less
CVE-2023-41104 1Varnish Software 2Varnish Enterprise Vmod Digest Jun 17, 2026 Aug 23, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the...Show more libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use.Show less
CVE-2023-39984 1Hitachi 1Eh View Jun 17, 2026 Aug 23, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 UNSUPPORTED WHEN ASSIGNED Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and exe...Show more UNSUPPORTED WHEN ASSIGNED Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
CVE-2023-21264 1Google 1Android Jun 17, 2026 Aug 14, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileg...Show more In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Show less
CVE-2023-3261 2Cyberpower Dataprobe 23Iboot Pdu4 C20 Firmware Iboot Pdu4 N20 FirmwareIboot Pdu4a C10 Firmware+20 more Jun 17, 2026 Aug 14, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavi...Show more The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.Show less
CVE-2023-3824 3Debian FedoraprojectPhp 3Debian Linux FedoraPhp Jun 17, 2026 Aug 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading po...Show more In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.Show less
CVE-2023-33867 1Intel 1Realsense 450 Fa Firmware Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-32656 1Intel 1Realsense 450 Fa Firmware Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-27506 1Intel 1Optimization For Tensorflow Jun 17, 2026 Aug 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-36372 1Intel 34Nuc 8 Compute Element Cm8ccb4r Firmware Nuc 8 Compute Element Cm8i3cb4n FirmwareNuc 8 Compute Element Cm8i5cb8n Firmware+31 more Jun 17, 2026 Aug 11, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-27879 1Intel 71Atom X5 E3930 Firmware Atom X5 E3940 FirmwareAtom X7 E3950 Firmware+68 more Jun 17, 2026 Aug 11, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVE-2023-3953 1Schneider Electric 1Pro Face Gp Pro Ex Jun 17, 2026 Aug 9, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.
CVE-2022-4046 1Codesys 14Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+11 more Jun 17, 2026 Aug 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
CVE-2023-4073 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-1437 1Advantech 1Webaccess/scada Jun 17, 2026 Aug 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an a...Show more All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files. Show less

Previous 1...147148149...734 Next