CWE-119
14,075 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,075)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS. |
1Qualcomm 30Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+27 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU,...Show more |
1Qualcomm 14Msm8996au Firmware Sd 425 FirmwareSd 430 Firmware+11 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850,...Show more |
1Qualcomm 9Msm8996au Firmware Sd 450 FirmwareSd 625 Firmware+6 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 |
1Qualcomm 16Mdm9206 Firmware Mdm9607 FirmwareMdm9640 Firmware+13 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206...Show more |
1Qualcomm 3Sd 835 Firmware Sda660 FirmwareSdx24 FirmwareJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24. |
1Qualcomm 19Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+16 moreNov 21, 2024 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM960...Show more |
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers. |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow occur may occur in display handlers due to lack of checking in buffer size before copying into it...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in display function due to lack of buffer length validation before copying. |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in debugfs module due to lack of check in size of input before copying into b...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a partition name-check variable is not reset for every iteration which may cause improper termination in the META...Show more |
1Lenovo 1System Management Module Firmware Nov 21, 2024 Nov 27, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow. |
1Lenovo 1System Management Module Firmware Nov 21, 2024 Nov 27, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows. |
In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function. |
A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code. |
A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code. |
1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Nov 26, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp. |
3Debian GnuplotOpensuse3Debian Linux GnuplotLeapNov 21, 2024 Nov 23, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size c...Show more |