Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,079)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-11889 1Google 1Android Nov 21, 2024 Sep 19, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when requesting rssi timeout, access invalid memory may occur since local variable 'context' stack data of wlan...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when requesting rssi timeout, access invalid memory may occur since local variable 'context' stack data of wlan function is free.Show less
CVE-2018-11878 1Google 1Android Nov 21, 2024 Sep 19, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function.
CVE-2018-11869 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.
CVE-2018-11868 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in nan response eve...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in nan response event handler.Show less
CVE-2018-11863 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from firmware to calculate the length of WMA roam synch buffer can lead to buffe...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from firmware to calculate the length of WMA roam synch buffer can lead to buffer overwrite during memcpy.Show less
CVE-2018-11860 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message leng...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message length.Show less
CVE-2018-11842 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though the memory was not allocated.Show less
CVE-2018-11836 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function.
CVE-2018-11832 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap overflow.
CVE-2018-11298 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm string that gets passed...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm string that gets passed by upper-layer is NULL terminated. This may lead to buffer overflow as strlen is used to get realm string length to construct the PASSPOINT WMA command.Show less
CVE-2018-11274 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when payload size is extremely large.
CVE-2018-11265 1Google 1Android Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while incrementing the log_buf of type uint64_t in memcpy function, since the log_buf p...Show more In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while incrementing the log_buf of type uint64_t in memcpy function, since the log_buf pointer can access the memory beyond the size to store the data after pointer increment.Show less
CVE-2018-14320 1Podofo Project 1Podofo Nov 21, 2024 Sep 17, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...Show more This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within PdfEncoding::ParseToUnicode. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-5673.Show less
CVE-2018-17143 2Fedoraproject Golang 2Fedora Net Nov 21, 2024 Sep 17, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.
CVE-2018-17106 1Tinyftp Project 1Tinyftp Nov 21, 2024 Sep 16, 2018 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file. An attacker can overwrite ebp via a long pathname.
CVE-2018-17076 1Logological 1General Purpose Preprocessor Nov 21, 2024 Sep 16, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
CVE-2018-10637 1Fujielectric 1V Server Nov 21, 2024 Sep 13, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior.
CVE-2018-16745 1Mgetty Project 1Mgetty Nov 21, 2024 Sep 13, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it.
CVE-2018-8464 1Microsoft 1Edge Jun 17, 2026 Sep 13, 2018 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge.
CVE-2018-3657 2Intel Siemens 14Active Management Technology Firmware Converged Security Management Engine FirmwareManageability Engine Firmware+11 more Nov 21, 2024 Sep 12, 2018 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.

Previous 1...201202203...704 Next