← Back
CWE-119

14,079 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,079)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Intel
1Extreme Tuning Utility
Nov 21, 2024
Sep 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access.
1Intel
1Extreme Tuning Utility
Nov 21, 2024
Sep 12, 2018
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access.
1Intel
1Extreme Tuning Utility
Nov 21, 2024
Sep 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.
1Freebsd
1Freebsd
Nov 21, 2024
Sep 12, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploit...Show more
In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context.Show less
1Freebsd
1Freebsd
Nov 21, 2024
Sep 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a...Show more
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow.Show less
1Freebsd
1Freebsd
Nov 21, 2024
Sep 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow.
1Samsung
1Sth Eth 250 Firmware
Nov 21, 2024
Sep 10, 2018
N/A· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly extracts fiel...Show more
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy overflows the destination buffer, which has a size of 2,000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.Show less
1Entropymine
1Imageworsener
Nov 21, 2024
Sep 10, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
1Webassembly Virtual Machine Project
1Webassembly Virtual Machine
Nov 21, 2024
Sep 10, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.Show less
1Webassembly Virtual Machine Project
1Webassembly Virtual Machine
Nov 21, 2024
Sep 10, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.Show less
1Webassembly Virtual Machine Project
1Webassembly Virtual Machine
Nov 21, 2024
Sep 10, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.Show less
1Solarwinds
1Dameware Mini Remote Control
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
6.1 MEDIUM· v3
3.6 LOW· v2
An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c.
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvm_set_type in os/storage/antelope/lvm.c while parsing AQL (lvm_set_op, lvm_set_relation, lvm_set_operand).
1Marklogic
1Marklogic
Nov 21, 2024
Sep 7, 2018
N/A· v4
8.6 HIGH· v3
6.8 MEDIUM· v2
An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary cod...Show more
An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.Show less
1Marklogic
1Marklogic
Nov 21, 2024
Sep 7, 2018
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrar...Show more
An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger this vulnerability.Show less
1Canonical
1Ubuntu Linux
Nov 21, 2024
Sep 7, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1...Show more
Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors.Show less
1Artifex
1Mupdf
Nov 21, 2024
Sep 6, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
Nov 21, 2024
Sep 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image...Show more
There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.Show less
1Nasm
1Netwide Assembler
Nov 21, 2024
Sep 6, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability...Show more
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..Show less