Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46295 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead...Show more Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the Gaussian file formatShow less
CVE-2022-46294 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead...Show more Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC Cartesian file formatShow less
CVE-2022-46293 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead...Show more Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Final Point and Derivatives sectionShow less
CVE-2022-46292 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead...Show more Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation sectionShow less
CVE-2022-46291 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead...Show more Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file formatShow less
CVE-2022-43607 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An...Show more An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-43467 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker...Show more An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-37331 1Openbabel 1Open Babel Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An att...Show more An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2023-28730 1Panasonic 1Control Fpwin Pro Jun 17, 2026 Jul 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files.
CVE-2023-30431 1Ibm 1Db2 Jun 17, 2026 Jul 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arb...Show more IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.Show less
CVE-2023-31194 1Diagon Project 1Diagon Jun 17, 2026 Jul 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markdown file can lead to memory corruption. A victim would need to open a malicious...Show more An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markdown file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.Show less
CVE-2023-21637 1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+51 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux while calling system configuration APIs.
CVE-2023-21633 1Qualcomm 96Apq8064au Firmware Aqt1000 FirmwareFastconnect 6200 Firmware+93 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-3138 2Redhat X.org 2Enterprise Linux Libx11 Jun 17, 2026 Jun 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the array...Show more A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.Show less
CVE-2023-21167 1Google 1Android Jun 17, 2026 Jun 28, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges n...Show more In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942964Show less
CVE-2023-3110 1Silabs 1Unify Software Development Kit Jun 17, 2026 Jun 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
CVE-2023-0972 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
CVE-2023-0969 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 3.5 LOW· v3 N/A· v2 A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.
CVE-2023-32270 1Fujielectric 2Tellus Tellus Lite Jun 17, 2026 Jun 19, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.
CVE-2023-3036 1Cloudflare 1Cfnts Jun 17, 2026 Jun 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by...Show more An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents. Show less

Previous 1...148149150...734 Next