Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-43314 1Upx 1Upx Jun 17, 2026 Mar 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:...Show more A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5368Show less
CVE-2021-43313 1Upx 1Upx Jun 17, 2026 Mar 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invert_pt_dynamic at p_lx_elf.cpp:1688.
CVE-2021-43312 1Upx 1Upx Jun 17, 2026 Mar 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239.
CVE-2021-43311 1Upx 1Upx Jun 17, 2026 Mar 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5...Show more A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5382.Show less
CVE-2021-3674 1Rizin 1Rizin Jun 17, 2026 Mar 24, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corru...Show more A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.Show less
CVE-2023-22882 1Zoom 1Zoom Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of servi...Show more Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.Show less
CVE-2023-22881 1Zoom 1Zoom Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of servi...Show more Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.Show less
CVE-2022-34423 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34422 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34421 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34420 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34419 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34418 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34417 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34416 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34415 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34414 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34413 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34412 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34411 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less

Previous 1...152153154...734 Next