Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-41808 1Intel 1Quickassist Technology Jun 17, 2026 May 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2021-46760 1Amd 7Ryzen 3945wx Firmware Ryzen 3955wx FirmwareRyzen 3960x Firmware+4 more Jun 17, 2026 May 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achi...Show more A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achieving code execution. Show less
CVE-2023-30088 1Cesanta 1Mjs Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
CVE-2023-30986 1Siemens 1Solid Edge Se2023 Oct 23, 2026 May 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing...Show more A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19561)Show less
CVE-2022-47488 1Google 1Android Jun 17, 2026 May 9, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2023-26285 1Ibm 1Mq Appliance Jun 17, 2026 May 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.
CVE-2023-29932 1Llvm 1Llvm Jun 17, 2026 May 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
CVE-2022-25713 1Qualcomm 55Ar8035 Firmware Qam8295p FirmwareQca6390 Firmware+52 more Jun 17, 2026 May 2, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
CVE-2023-25509 1Nvidia 1Sbios Jun 17, 2026 Apr 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.
CVE-2023-0206 1Nvidia 1Dgx A100 Firmware Jun 17, 2026 Apr 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation o...Show more NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.Show less
CVE-2023-0202 1Nvidia 1Dgx A100 Firmware Jun 17, 2026 Apr 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to deni...Show more NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.Show less
CVE-2021-33797 1Artifex 1Mujs Jun 17, 2026 Apr 17, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.
CVE-2023-29571 1Cesanta 1Mjs Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2023-29574 1Axiosys 1Bento4 Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.
CVE-2022-46396 1Arm 2Avalon Gpu Kernel Driver Valhall Gpu Kernel Driver Jun 17, 2026 Apr 11, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p...Show more An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.Show less
CVE-2023-25755 1Jtekt 1Screen Creator Advance 2 Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a projec...Show more Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed.Show less
CVE-2023-27729 1F5 1Njs Jun 17, 2026 Apr 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
CVE-2022-46781 1Arm 2Avalon Gpu Kernel Driver Valhall Gpu Kernel Driver Jun 17, 2026 Apr 6, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through...Show more An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.Show less
CVE-2023-29420 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.
CVE-2023-26974 1Irfanview 1Irfanview Jun 17, 2026 Apr 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.

Previous 1...150151152...734 Next