Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,662)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34411 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34410 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34409 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34408 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34407 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2022-34406 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Mar 16, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbi...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less
CVE-2023-27403 1Siemens 1Tecnomatix Plant Simulation Oct 23, 2026 Mar 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could al...Show more A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20303, ZDI-CAN-20348)Show less
CVE-2022-47453 1Google 1Android Jun 17, 2026 Mar 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.
CVE-2022-25709 1Qualcomm 68Ar8035 Firmware Qca6174a FirmwareQca6310 Firmware+65 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694 1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2023-20049 1Cisco 1Ios Xr Jun 17, 2026 Mar 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR...Show more A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of malformed BFD packets that are received on line cards where the BFD hardware offload feature is enabled. An attacker could exploit this vulnerability by sending a crafted IPv4 BFD packet to an affected device. A successful exploit could allow the attacker to cause line card exceptions or a hard reset, resulting in loss of traffic over that line card while the line card reloads.Show less
CVE-2019-8720 3Redhat WebkitgtkWpewebkit 23Codeready Linux Builder Codeready Linux Builder EusCodeready Linux Builder For Arm64 Eus+20 more Oct 8, 2026 Mar 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issu...Show more A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.Show less
CVE-2023-23517 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Feb 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing mal...Show more The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2023-23507 1Apple 1Macos Jun 17, 2026 Feb 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges.
CVE-2022-34841 1Intel 1Media Software Development Kit Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-46023 1Mruby 1Mruby Jun 17, 2026 Feb 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash.
CVE-2023-24564 1Siemens 1Solid Edge Se2023 Oct 23, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corrupt...Show more A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069)Show less
CVE-2022-47977 1Siemens 2Jt Open Toolkit Jt Utilities Oct 24, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT f...Show more A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2022-33246 1Qualcomm 42Apq8096au Firmware Aqt1000 FirmwareMsm8996au Firmware+39 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-34377 1Dell 80C4130 Firmware C4140 FirmwareC6320 Firmware+77 more Jun 17, 2026 Feb 10, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform ar...Show more Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service. Show less

Previous 1...153154155...734 Next